Splunk and SolarWinds patch code execution and access flaws
Fixes cover 16 product CVEs in Splunk Enterprise, 15 in SOAR, plus Observability and Patch Manager bugs.
66
CVE-2026-76302
Improper neutralization in Cisco software (low-privilege network)
- CVSS 3.1
- 9.9 critical
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Cisco’s internal security review found improper-neutralization flaws (CWE-707) tracked as CVE-2026-76302 and addressed in a software hardening release. A remote attacker with low privileges can trigger them over the network without user interaction. Impact is high for confidentiality, integrity, and availability, with changed scope. Cisco has not named the affected products or builds.
What to do: Apply Cisco’s software hardening update for CVE-2026-76302. No workaround is named.
Description · NVD
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76302 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.
- Weakness
- CWE-707
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
In the news
2 storiesSplunk patches 24 flaws, four critical, in Enterprise and SOAR
October 21 fixes cover CVSS 9.9 bugs; Secure Gateway also needs updates for two CVEs.
62