CVE-2026-76281: Improper Access Control in Splunk Enterprise

Q: Were these issues reported externally?

The vulnerabilities were internally identified by Splunk.

Q: Does this CVE represent one specific flaw?

It covers a group of multiple vulnerabilities classified under the same Common Weakness Enumeration category, with one CVE assigned to that group.

Published Oct 7, 2026

Updated

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Affected Software

5 affected components

Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15

Splunk splunk>=9.4.0<9.4.15

Splunk splunk>=10.0.0<10.0.10

Splunk splunk>=10.2.0<10.2.7

Splunk splunk>=10.4.0<10.4.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.4.3

Event History

Oct 7, 2026

CVE Published

via MITRE·08:46 PM

Data Sourced

via MITRE·08:46 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·09:17 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

Were these issues reported externally?

The vulnerabilities were internally identified by Splunk.

Does this CVE represent one specific flaw?