{"id":"CVE-2026-76301","published":"2026-10-21T23:17:28Z","modified":"2026-10-28T03:17:15Z","title":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","vendor":"Splunk","product":"Splunk Enterprise","tier":"core","eol":null,"description":{"text":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76301 are related to protection mechanism failure and are grouped under the Common Weakness Enumeration (CWE) CWE-693.","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is a protection mechanism failure (CWE-693) affecting Splunk Enterprise, one of several internally discovered vulnerabilities addressed in a Cisco software hardening release. The provided record does not specify the affected component, the exact weakness behaviour, or the conditions under which an attacker could exploit it, so what an attacker can do cannot be determined from this information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:24:49Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.00382,"percentile":0.32313,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-693","name":"Protection Mechanism Failure"}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2026-1008","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-107650","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107650","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-21","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76301","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":13.3,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":6.46,"detail":"percentile 0.3231"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}