CVE-2026-76282
Modified Modified - Updated After Analysis

BaseFortify

Vulnerability report for CVE-2026-76282, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-07

Last updated on: 2026-10-16

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76282 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-08
EPSS Evaluated
2026-10-18
NVD

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
splunk splunk From 10.0.0 (inc) to 10.0.10 (exc)
splunk splunk From 10.2.0 (inc) to 10.2.7 (exc)
splunk splunk From 10.4.0 (inc) to 10.4.3 (exc)
splunk splunk From 9.4.0 (inc) to 9.4.15 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-664 The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is categorized as Improper Control of a Resource Through its Lifetime. It affects Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The issue was identified and addressed by Splunk internally.

Impact Analysis

The impact depends on how Splunk Enterprise is used in your environment. Improper control of resources could lead to unauthorized access, data leaks, or system instability if exploited.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The description only mentions improper resource control without detailing potential data exposure or access issues that would affect regulatory compliance.

Mitigation Strategies

Update Splunk Enterprise to the latest patched versions (10.4.3, 10.2.7, 10.0.10, or 9.4.15) to address the improper resource control vulnerabilities.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76282. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart