---
id: CVE-2026-76299
title: Security Hardening in Splunk Enterprise - October 2026
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review. This
  review resulted in a software hardening release that addresses multiple
  internally discov…
severity: none
cwe:
  - CWE-284
vendor: Splunk
product: Splunk Enterprise
affected:
  - enterprise >= 10.4 < 10.4.4
  - enterprise >= 10.2 < 10.2.8
  - enterprise >= 10.0 < 10.0.11
  - enterprise >= 9.4 < 9.4.16
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T22:52:01.149Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-76299'
references:
  - url: 'https://advisory.splunk.com/advisories/SVD-2026-1008'
tags:
  - cve.org
ingestedAt: '2026-10-21T23:20:10.325Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76299 are related to improper access control and are grouped under the Common Weakness Enumeration (CWE) CWE-284.

## Affected

- `enterprise >= 10.4 < 10.4.4`
- `enterprise >= 10.2 < 10.2.8`
- `enterprise >= 10.0 < 10.0.11`
- `enterprise >= 9.4 < 9.4.16`

## Remediation

Upgrade Splunk Enterprise to versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16 or higher.