CVE-2026-76281:详情

CVE-2026-76281

2026-10-07
20h46 +00:00
A01-Broken Access Control
2026-11-07
16h57 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Improper Access Control in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76281 are related to improper access control issues that are grouped under the Common Weakness Enumeration (CWE) CWE-284.

CVE 解决方案

Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

相关产品

配置 0

Splunk>>Splunk >> Version 从(含) 9.4.0 至(不含) 9.4.15

Splunk>>Splunk >> Version 从(含) 10.0.0 至(不含) 10.0.10

Splunk>>Splunk >> Version 从(含) 10.2.0 至(不含) 10.2.7

Splunk>>Splunk >> Version 从(含) 10.4.0 至(不含) 10.4.3

参考资料