Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6003 articles · 245867 vulns · 36/41 feeds (7d)
← Back to list
9.9
CVE-2026-76299PATCHED
splunk · splunk enterpri

Security Hardening in Splunk Enterprise - October 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76299 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Affected Products

VendorProductVersions
splunksplunk enterpri10.4, 10.2, 10.0, 9.4

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
splunksplunk enterprisecert_advisory90%

References

  • https://advisory.splunk.com/advisories/SVD-2026-1008

Related News (4 articles)

Tier B
BSI Advisories7h ago
[NEU] [hoch] Splunk Splunk Enterprise: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
SecurityWeek10h ago
Splunk, SolarWinds Release Fresh Security Updates
→ No new info (linked only)
Tier B
CERT-FR21h ago
Multiples vulnérabilités dans les produits Splunk (22 octobre 2026)
→ No new info (linked only)
Tier C
VulDB22h ago
CVE-2026-76299 | Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 access control
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
10.4.410.2.810.0.119.4.16
CWECWE-284
PublishedOct 21, 2026
Last enriched21h agov2
Trending Score53
Source articles4
Independent4
Info Completeness8/14
Missing: cvss, epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-76531
Files or Directories Accessible to External Parties in Splunk SOAR
Trending: 53
HIGHCVE-2026-76288
Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise
Trending: 51
HIGHCVE-2026-76290
Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise
Trending: 51
CRITICALCVE-2026-76302
Security Hardening in Splunk Enterprise - October 2026
Trending: 49
HIGHCVE-2026-76298
Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
Trending: 46

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 21, 2026
Discovered by ZDM
Oct 21, 2026
Updated: description, severity
Oct 21, 2026
Patch Available
Oct 22, 2026

Version History

v2
Last enriched 21h ago
v2Tier C21h ago

Severity updated from NONE to CRITICAL and description enhanced with technical details about remote attack vector and unknown processing component.

descriptionseverity
via VulDB
v122h ago

Initial creation