Improper Access Control Vulnerability in Cisco Products
CVE-2026-76299

Currently unrated

Key Information:

Vendor

Splunk

Vendor
CVE Published:
21 October 2026

What is CVE-2026-76299?

Cisco has identified vulnerabilities in its products due to improper access control mechanisms. This security flaw can potentially allow unauthorized users to gain access to restricted areas of the system, leading to data breaches or unauthorized data manipulation. As part of a proactive approach to security, Cisco has released a software update to harden its applications against these vulnerabilities, effectively addressing the concerns associated with CWE-284.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.4

Splunk Enterprise 10.2 < 10.2.8

Splunk Enterprise 10.0 < 10.0.11

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.