CVE-2026-76281

{
  "etk_id": "ETK-2026-1339",
  "cve_id": "CVE-2026-76281",
  "display_id": "CVE-2026-76281",
  "ghsa_id": "GHSA-24c4-mg94-gv8m",
  "euvd_id": "EUVD-2026-94633",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper access control in Splunk Enterprise",
  "summary": "Splunk Enterprise contains internally identified access-control flaws addressed in releases 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The available advisory information does not specify the access an attacker could gain or the conditions required to exploit the issues.",
  "mitigation": "Upgrade Splunk Enterprise to 10.4.3, 10.2.7, 10.0.10, or 9.4.15, as appropriate for the deployed release branch. Restrict access to the management interface until the update is complete.",
  "vendor": "Splunk",
  "product": "Splunk Enterprise",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 10.4, < 10.4.3",
        ">= 10.2, < 10.2.7",
        ">= 10.0, < 10.0.10",
        ">= 9.4, < 9.4.15"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "10.4.3",
        "10.2.7",
        "10.0.10",
        "9.4.15"
      ],
      "package_name": "Splunk Enterprise",
      "purl": null
    }
  ],
  "cwes": [
    284
  ],
  "cvss_score": 5.3,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "epss_score": 0.002,
  "epss_percentile": 0.0982,
  "epss_asof": "2026-10-21",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 50.53051583333333,
  "t0_at": "2026-10-07T20:46:37.805000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-12T11:28:32.910035+00:00",
      "days": 4.6124433453125,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T20:46:37.805000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-07T20:46:37.805000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T20:46:37.805000+00:00",
      "url": "https://github.com/advisories/GHSA-24c4-mg94-gv8m"
    }
  }
}