Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-76281

Splunk: access control flaw

Risk score
44/100
CVSS
5.3 v3.1
Exploit chance (30 days)
0.2%
Published
7 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to…
Affected
Splunk
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Story map

Story map: SplunkTHE FLAWSTHE FIXCVE-2026-76281Access control flawCVSS 5.3 · EPSS 0%CVE-2026-76268Missing authenticationCVSS 9.8 · EPSS 2%CVE-2026-76284As part of Cisco's ongoingcommitment to proactivesecurity and product quality…CVSS 9.8 · EPSS 0%CVE-2026-76285As part of Cisco's ongoingcommitment to proactivesecurity and product quality…CVSS 9.8 · EPSS 0%FixApply the vendor's securityupdate; see the linked advisory.Who is exposedSplunkAMBER · PATCH THIS WEEKSplunkIn Splunk Enterprise versionsbelow 10.4.3 and 10.2.7, anunauthenticated user withnetwork access to the PatroniRepresentational StateTransfer (REST) ApplicationProgramming Interface (API)…Where it standsNo known exploitationCONNECTS TOSame weaknessAccess control flaw (CWE-284)325 other warnings in 30 days →Same productEarlier Splunk warnings18 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Splunk: Amber, patch this week. In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerability is possible bec…

The flaws

  • CVE-2026-76281: Access control flaw (CVSS 5.3 · EPSS 0%)
  • CVE-2026-76268: Missing authentication (CVSS 9.8 · EPSS 2%)
  • CVE-2026-76284: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has… (CVSS 9.8 · EPSS 0%)
  • CVE-2026-76285: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has… (CVSS 9.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Splunk

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 5.3 medium
  • On your watchlist: cisco

References

Original description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

Last activity 7 Oct 2026. Patch Forecast updates every hour.