# CVE-2026-76300: Splunk Enterprise improper resource control

Source: https://junglewise.ai/threats/cve-2026-76300-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-21. Updated: 2026-10-21  
License: CC BY 4.0 with a link back

CVE-2026-76300 · Severity: info · Published 2026-10-21

Splunk Enterprise, a data analytics and security platform used by enterprises, contains a vulnerability related to improper control of system resources throughout their lifetime. This flaw could allow attackers to cause denial of service or trigger unexpected system behavior. Splunk has released patched versions to address this issue as part of a comprehensive security hardening update.

Technologies: [Splunk Enterprise](https://junglewise.ai/threats/technologies/splunk-enterprise). Vendors: [Splunk](https://junglewise.ai/threats/vendors/splunk).

## Quick answers

**Is CVE-2026-76300 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76300 being exploited in the wild.

**How severe is CVE-2026-76300?** Informational severity, published 21 October 2026.

**Which products and versions are affected?** Splunk Enterprise 10.4.0 to 10.4.3, 10.2.0 to 10.2.7, 10.0.0 to 10.0.10, 9.4.0 to 9.4.15.

**Is there a fix for CVE-2026-76300?** Yes: fixed in Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, 9.4.16. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-76300 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-76300?** Check whether you run Splunk Enterprise at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, 9.4.16

## Technical details

The vulnerability is classified as CWE-664 (Improper Control of a Resource Through its Lifetime) and affects Splunk Enterprise across multiple version branches. The flaw relates to inadequate resource lifecycle management, which could be exploited through network-based attacks with elevated CVSS score of 8.8 indicating high impact. Patches are available in versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16.

## Affected products

- Splunk Enterprise 10.4.0 to 10.4.3, 10.2.0 to 10.2.7, 10.0.0 to 10.0.10, 9.4.0 to 9.4.15

## Timeline

- 2026-10-21: disclosed

## References

- [https://advisory.splunk.com/advisories/SVD-2026-1008](https://advisory.splunk.com/advisories/SVD-2026-1008)

## Related threats

- [Splunk Enterprise improper neutralization vulnerability](https://junglewise.ai/threats/cve-2026-76302-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Splunk Enterprise protection mechanism failure](https://junglewise.ai/threats/cve-2026-76301-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Splunk Enterprise improper access control](https://junglewise.ai/threats/cve-2026-76299-as-part-of-cisco-s-ongoing-commitment-to-proactive-security-and)
- [Splunk Enterprise hardcoded cryptographic key in PostgreSQL sidecar](https://junglewise.ai/threats/cve-2026-76298-in-splunk-enterprise-versions-below-10-4-4-and-10-2-8-a-user-who)
- [Splunk Enterprise federated search provider CSRF state change](https://junglewise.ai/threats/cve-2026-76297-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4)