Live › vulnerability › CVE-2026-76302
Go to dashboardCisco's Splunk Enterprise has multiple internally found flaws tracked under CWE-707 (improper neutralization) that were fixed in a hardening release. The sources do not say what an attacker can actually do with them.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Splunk Enterprise | vendor | >= 10.4.0, < 10.4.4; >= 10.2.0, < 10.2.8; >= 10.0.0, < 10.0.11; >= 9.4.0, < 9.4.16 | 10.4.4, 10.2.8, 10.0.11, 9.4.16 |
Run splunk version on the Splunk host and compare it to the affected ranges: 10.4.0 to before 10.4.4, 10.2.0 to before 10.2.8, 10.0.0 to before 10.0.11, 9.4.0 to before 9.4.16.
Upgrade to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11 or 9.4.16, matching your release line.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.
This page as .md · .json · in your agent: get_signal("CVE-2026-76302")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.