CVE-2026-76300: The software does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release. in Splunk Splunk Enterprise

This vulnerability concerns Splunk Enterprise software versions prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16, where the software does not maintain or incorrectly maintains control over a resource throughout its creation, use, and release phases. This is classified under CWE-664, which relates to improper control of a resource's lifetime. The issue was discovered internally by Cisco and addressed through a software hardening release. No detailed technical exploitation methods or impact scenarios are provided.

The vulnerability may lead to improper management of resources within Splunk Enterprise, potentially causing resource leaks, inconsistent states, or other stability and security issues. There is no evidence of active exploitation in the wild. The exact impact on confidentiality, integrity, or availability is not detailed in the provided data.

A software hardening release addressing this vulnerability has been made available by Cisco. Users should upgrade to versions 10.4.4 or later, 10.2.8 or later, 10.0.11 or later, or 9.4.16 or later of Splunk Enterprise to remediate this issue. Patch status is confirmed by the affected version ranges indicating fixed versions. No additional mitigation steps are specified.