Protection Mechanism Failure in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76283 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693.

Problem type

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Affected products

Splunk

Splunk Enterprise

< 10.4.3 - AFFECTED

< 10.2.7 - AFFECTED

< 10.0.10 - AFFECTED

< 9.4.15 - AFFECTED

References

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

GitHub Security Advisories

GHSA-8xjr-85h4-xc23

Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in...

https://github.com/advisories/GHSA-8xjr-85h4-xc23

Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-76283

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

github.com

https://github.com/advisories/GHSA-8xjr-85h4-xc23

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-76283

Click to expand

{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-76283",
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "dateUpdated": "2026-10-16T17:55:31.267Z",
    "dateReserved": "2026-08-19T12:02:03.621Z",
    "datePublished": "2026-10-07T20:46:38.794Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco",
        "dateUpdated": "2026-10-16T17:55:31.267Z"
      },
      "datePublic": "2026-10-07T00:00:00.000Z",
      "title": "Protection Mechanism Failure in Splunk Enterprise",
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76283 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693."
        }
      ],
      "affected": [
        {
          "vendor": "Splunk",
          "product": "Splunk Enterprise",
          "versions": [
            {
              "version": "10.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.4.3"
            },
            {
              "version": "10.2",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.2.7"
            },
            {
              "version": "10.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.0.10"
            },
            {
              "version": "9.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "9.4.15"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.",
              "cweId": "CWE-693",
              "type": "cwe"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://advisory.splunk.com/advisories/SVD-2026-1002"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher."
        }
      ]
    },
    "adp": [
      {
        "providerMetadata": {
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP",
          "dateUpdated": "2026-10-08T13:26:37.764Z"
        },
        "title": "CISA ADP Vulnrichment",
        "metrics": [
          {
            "cvssV3_1": {
              "version": "3.1",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
              "attackVector": "NETWORK",
              "attackComplexity": "LOW",
              "privilegesRequired": "LOW",
              "userInteraction": "NONE",
              "scope": "UNCHANGED",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "LOW",
              "availabilityImpact": "LOW",
              "baseScore": 7.6,
              "baseSeverity": "HIGH"
            }
          },
          {}
        ]
      }
    ]
  }
}