Vulnerability in Talos Intelligence for Enterprise Security Cloud by Cisco

CVE-2026-76389

What is CVE-2026-76389?

A vulnerability exists in Cisco Talos Intelligence for Enterprise Security Cloud versions 1.0.2 and earlier, where an authenticated user with the 'get_talos_enrichment' capability can craft and send a malicious request to the Talos intelligence enrichment REST API endpoint. This action enables the account to initiate outbound requests to externally controlled servers, potentially exposing sensitive tokens and compromising data integrity in the associated Splunk instance. Attackers could exploit this flaw to gain unauthorized access to critical information within the system, highlighting the importance of updates and security best practices.

References