OCTOBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-76281

MEDIUM · CVSS 5.3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-10-07 · Last synced 2026-10-14

CyberRota Analysis

AI-Generated

Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are vulnerable due to improper access control, which could allow unauthorized users to gain access to sensitive data or functionalities. Organizations using these versions should prioritize remediation to mitigate potential data breaches or compliance issues. Security teams should assess their deployments and apply the necessary updates to safeguard against these vulnerabilities.

CVE
CVE-2026-76281
Severity
MEDIUM
CVSS
5.3
EPSS
0.21%

Original NVD Description

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Related CVEs

Other vulnerabilities affecting the same vendor(s)