CVE-2026-76301: The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. in Splunk Splunk Enterprise

This vulnerability, tracked as CVE-2026-76301, arises from Splunk Enterprise not using or incorrectly using protection mechanisms that provide sufficient defense against targeted attacks. The issue was discovered internally by Cisco during a security review and grouped under CWE-693. A software hardening release was issued to address this and other vulnerabilities. The affected versions include Splunk Enterprise versions from 9.4 up to but not including 9.4.16, 10.0 up to but not including 10.0.11, 10.2 up to but not including 10.2.8, and 10.4 up to but not including 10.4.4.

The vulnerability could allow attackers to bypass or weaken protection mechanisms in Splunk Enterprise, potentially enabling directed attacks against the product. The exact impact details are not specified beyond the failure of protection mechanisms. There are no known exploits in the wild at this time.

A software hardening release addressing this vulnerability has been issued by Cisco. Users should upgrade to versions 9.4.16 or later, 10.0.11 or later, 10.2.8 or later, and 10.4.4 or later to remediate this issue. Patch status is confirmed by the affected version ranges indicating fixed versions. No additional mitigation steps are specified.