CVE-2026-76281 : 詳細

CVE-2026-76281

2026-10-07
20h46 +00:00
A01-Broken Access Control
2026-10-27
20h08 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Improper Access Control in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

CVE の解決策

Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

関連製品

構成 0

Splunk>>Splunk >> Version ~から(含む) 9.4.0 ~まで(含まない) 9.4.15

Splunk>>Splunk >> Version ~から(含む) 10.0.0 ~まで(含まない) 10.0.10

Splunk>>Splunk >> Version ~から(含む) 10.2.0 ~まで(含まない) 10.2.7

Splunk>>Splunk >> Version ~から(含む) 10.4.0 ~まで(含まない) 10.4.3

参考資料