CVE-2026-76285

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has…

Risk score: 78/100
CVSS: 9.8 v3.1
Exploit chance (30 days): 0.3%
Published: 7 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to…
Affected: Splunk
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Story map

Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Splunk: Amber, patch this week. In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerability is possible bec…

The flaws

CVE-2026-76285: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has… (CVSS 9.8 · EPSS 0%)
CVE-2026-76268: Missing authentication (CVSS 9.8 · EPSS 2%)
CVE-2026-76284: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has… (CVSS 9.8 · EPSS 0%)
CVE-2026-76282: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has… (CVSS 8.8 · EPSS 0%)

The fix

Fix: Apply the vendor's security update; see the linked advisory.

Who is exposed: Splunk

Where it stands

No known exploitation

Connects to

Same product: Earlier Splunk warnings. 18 in the last 90 days

Why it is Amber

CVSS 9.8 critical
Remotely exploitable without logging in
On your watchlist: cisco

References

https://advisory.splunk.com/advisories/SVD-2026-1002

Original description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.

Last activity 7 Oct 2026. Patch Forecast updates every hour.