---
id: CVE-2026-76281
title: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review. This
  review resulted in a software hardening release that addresses multiple
  internally discov…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-284
vendor: splunk
product: splunk
affected:
  - 'splunk >= 9.4.0, < 9.4.15'
  - 'splunk >= 10.0.0, < 10.0.10'
  - 'splunk >= 10.2.0, < 10.2.7'
  - 'splunk >= 10.4.0, < 10.4.3'
patched:
  - splunk 10.4.3
published: '2026-10-07'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:18:36.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76281'
references:
  - url: 'https://advisory.splunk.com/advisories/SVD-2026-1002'
    label: psirt@cisco.com
tags:
  - nvd
  - cve.org
epss: 0.00277
epssPercentile: 0.20002
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-27T20:05:26.438552Z'
ingestedAt: '2026-10-07T21:54:15.097Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

## Affected

- `splunk >= 9.4.0, < 9.4.15`
- `splunk >= 10.0.0, < 10.0.10`
- `splunk >= 10.2.0, < 10.2.7`
- `splunk >= 10.4.0, < 10.4.3`

## Remediation

Upgrade past the affected range:

- `splunk 10.4.3`