9.9Critical
CVE-2026-76299Security Hardening in Splunk Enterprise - October 2026
Description
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76299 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.
Weakness (CWE):
CWE-284
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Splunk | Splunk Enterprise | 10.4 – < 10.4.4, 10.2 – < 10.2.8, 10.0 – < 10.0.11, 9.4 – < 9.4.16 |