Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
6001 articles · 245867 vulns · 36/41 feeds (7d)
← Back to list
9.9
CVE-2026-76302PATCHED
splunk · splunk enterpri

Security Hardening in Splunk Enterprise - October 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Affected Products

VendorProductVersions
splunksplunk enterpri10.4, 10.2, 10.0, 9.4

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
splunksplunk enterprisecert_advisory90%

References

  • https://advisory.splunk.com/advisories/SVD-2026-1008

Related News (3 articles)

Tier B
BSI Advisories7h ago
[NEU] [hoch] Splunk Splunk Enterprise: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR21h ago
Multiples vulnérabilités dans les produits Splunk (22 octobre 2026)
→ No new info (linked only)
Tier C
VulDB22h ago
CVE-2026-76302 | Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 neutralization
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.9 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
10.4.410.2.810.0.119.4.16
CWECWE-707
PublishedOct 21, 2026
Last enriched21h agov2
Trending Score49
Source articles3
Independent3
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-76531
Files or Directories Accessible to External Parties in Splunk SOAR
Trending: 53
CRITICALCVE-2026-76299
Security Hardening in Splunk Enterprise - October 2026
Trending: 53
HIGHCVE-2026-76288
Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise
Trending: 51
HIGHCVE-2026-76290
Denial of Service (DoS) through Unauthenticated Package Downloads over the REST API in Splunk Enterprise
Trending: 51
HIGHCVE-2026-76298
Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
Trending: 46

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 21, 2026
Discovered by ZDM
Oct 21, 2026
Updated: severity, cvssEstimate, affectedVersions
Oct 21, 2026
Patch Available
Oct 22, 2026

Version History

v2
Last enriched 21h ago
v2Tier C21h ago

Updated severity to CRITICAL, estimated CVSS to 9.0 based on 'very critical' assessment, and corrected affected versions to pre-patch versions (9.4.15, 10.0.10, 10.2.7, 10.4.3)

severitycvssEstimateaffectedVersions
via VulDB
v122h ago

Initial creation