Signals
Back to database
Schedule42High7.6VulnerabilityCVE-2026-76283No patch link observed

CVE-2026-76283 — Protection Mechanism Failure.

Published Oct 7, 2026, 09:17 PM UTCIngested 1d agoSource NVD(cve-db)CVE-2026-76283

Description

Protection Mechanism Failure. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
7.6

High severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

Low

Attack Complexity

PR

Low

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

High

Confidentiality

I

Low

Integrity

A

Low

Availability

References

Related threats

same CWE or vendor
Critical

CVE-2026-16916 — IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to …

CVE-2026-16916 · 2h ago

Medium

PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

CVE-2026-60086 · 4h ago

Medium

CVE-2026-107697 — FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions rest…

CVE-2026-107697 · 5h ago

Medium

Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass

CVE-2026-104774 · 6h ago

Medium

AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS

CVE-2026-107226 · 7h ago

High

PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

CVE-2026-61437 · 7h ago