{"id":"CVE-2026-76281","aliases":[],"title":"Improper Access Control in Splunk Enterprise","titleSource":"cisco","descriptionSource":"cisco","products":[{"vendor":"Splunk","name":"Splunk Enterprise","platforms":[],"versions":[{"version":"10.4","status":"affected","lessThan":"10.4.3","versionType":"custom"},{"version":"10.2","status":"affected","lessThan":"10.2.7","versionType":"custom"},{"version":"10.0","status":"affected","lessThan":"10.0.10","versionType":"custom"},{"version":"9.4","status":"affected","lessThan":"9.4.15","versionType":"custom"}],"source":"cisco","url":"https://www.cve.org/CVERecord?id=CVE-2026-76281"}],"remediation":[{"text":"Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher.","source":"cisco","url":"https://www.cve.org/CVERecord?id=CVE-2026-76281"}],"description":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.","severity":"unknown","score":null,"published":"2026-10-07T20:46:37.805Z","modified":"2026-10-27T20:08:36.638Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://advisory.splunk.com/advisories/SVD-2026-1002"],"sources":[{"name":"CVE","id":"CVE-2026-76281","modified":"2026-10-27T20:08:36.638Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-76281"}],"assessments":[],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T18:05:32.161Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}