https://vulnogram.org/ Most recent CVEs assigned by Cisco Systems, Inc. (cisco). https://vulnogram.org/seaview/icons/cisco.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-76519 https://vulnogram.org/CVE-2026-76519 A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling… Critical Known Exploited Network Exploitable Wed, 14 Oct 2026 16:07:51 GMT https://vulnogram.org/CVE-2026-76286 https://vulnogram.org/CVE-2026-76286 In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface (API) tool to the URL configured for that tool. If another user controls th… Medium Wed, 07 Oct 2026 20:46:40 GMT https://vulnogram.org/CVE-2026-76285 https://vulnogram.org/CVE-2026-76285 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab… Critical Network Exploitable Wed, 07 Oct 2026 20:46:39 GMT https://vulnogram.org/CVE-2026-76284 https://vulnogram.org/CVE-2026-76284 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab… Critical Network Exploitable Wed, 07 Oct 2026 20:46:39 GMT https://vulnogram.org/CVE-2026-76283 https://vulnogram.org/CVE-2026-76283 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab… High Wed, 07 Oct 2026 20:46:38 GMT https://vulnogram.org/CVE-2026-76282 https://vulnogram.org/CVE-2026-76282 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab… High Wed, 07 Oct 2026 20:46:38 GMT https://vulnogram.org/CVE-2026-76281 https://vulnogram.org/CVE-2026-76281 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerab… Medium Network Exploitable Wed, 07 Oct 2026 20:46:37 GMT https://vulnogram.org/CVE-2026-76280 https://vulnogram.org/CVE-2026-76280 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not hold the "admin" or "sc_admin" Splunk roles could modify Splunk Secure G… Medium Wed, 07 Oct 2026 20:46:37 GMT https://vulnogram.org/CVE-2026-76279 https://vulnogram.org/CVE-2026-76279 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to write events to internal indexes outside the index acc… Medium Wed, 07 Oct 2026 20:46:36 GMT https://vulnogram.org/CVE-2026-76278 https://vulnogram.org/CVE-2026-76278 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affected Representational State Transfer (REST) API to access permission grants for SPL2 modules… Medium Wed, 07 Oct 2026 20:46:36 GMT https://vulnogram.org/CVE-2026-76277 https://vulnogram.org/CVE-2026-76277 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with a period. The vulnerability is possible because username validation d… Medium Wed, 07 Oct 2026 20:46:35 GMT https://vulnogram.org/CVE-2026-76276 https://vulnogram.org/CVE-2026-76276 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original source code for the Discover Splunk Observability Cloud app through Splunk Web. The… Medium Wed, 07 Oct 2026 20:46:35 GMT https://vulnogram.org/CVE-2026-76275 https://vulnogram.org/CVE-2026-76275 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadata for jobs that belong to other users, including job identifiers, disp… Medium Wed, 07 Oct 2026 20:46:34 GMT https://vulnogram.org/CVE-2026-76274 https://vulnogram.org/CVE-2026-76274 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an outbound request from Splunk App for Splunk Observability Cloud through the Representational State Trans… Medium Wed, 07 Oct 2026 20:46:34 GMT https://vulnogram.org/CVE-2026-76273 https://vulnogram.org/CVE-2026-76273 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language (SPL) command to add attacker-controlled content to system-level messag… Medium Wed, 07 Oct 2026 20:46:33 GMT https://vulnogram.org/CVE-2026-76272 https://vulnogram.org/CVE-2026-76272 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign attacker-controlled payloads. The vulnerability is possible because Splunk… Medium Wed, 07 Oct 2026 20:46:33 GMT https://vulnogram.org/CVE-2026-76271 https://vulnogram.org/CVE-2026-76271 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service against a Representational State Transfer (REST) API endpoint in the Discove… Medium Wed, 07 Oct 2026 20:46:32 GMT https://vulnogram.org/CVE-2026-76270 https://vulnogram.org/CVE-2026-76270 In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access all relevant data available through the affected Representational State Transfer (RE… Medium Wed, 07 Oct 2026 20:46:32 GMT https://vulnogram.org/CVE-2026-76269 https://vulnogram.org/CVE-2026-76269 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantially all search job information from jobs that belong… Medium Wed, 07 Oct 2026 20:46:31 GMT https://vulnogram.org/CVE-2026-76268 https://vulnogram.org/CVE-2026-76268 In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-co… Critical Wed, 07 Oct 2026 20:46:31 GMT https://vulnogram.org/CVE-2026-76267 https://vulnogram.org/CVE-2026-76267 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into the app log through the Representational State Transfer (REST) API. The vulnerability is… Medium Wed, 07 Oct 2026 20:46:30 GMT https://vulnogram.org/CVE-2026-76266 https://vulnogram.org/CVE-2026-76266 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-syste… High Wed, 07 Oct 2026 20:46:29 GMT https://vulnogram.org/CVE-2026-76265 https://vulnogram.org/CVE-2026-76265 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway… Medium Wed, 07 Oct 2026 20:46:29 GMT https://vulnogram.org/CVE-2026-76264 https://vulnogram.org/CVE-2026-76264 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scripted lookup definitions through raw configuration endpoints. The vulnerability is possible… Medium Wed, 07 Oct 2026 20:46:28 GMT https://vulnogram.org/CVE-2026-76472 https://vulnogram.org/CVE-2026-76472 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple i… High Wed, 07 Oct 2026 16:19:54 GMT https://vulnogram.org/CVE-2026-76467 https://vulnogram.org/CVE-2026-76467 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl… High Network Exploitable Wed, 07 Oct 2026 16:19:47 GMT https://vulnogram.org/CVE-2026-76470 https://vulnogram.org/CVE-2026-76470 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl… High Wed, 07 Oct 2026 16:19:34 GMT https://vulnogram.org/CVE-2026-76469 https://vulnogram.org/CVE-2026-76469 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple… High Wed, 07 Oct 2026 16:19:20 GMT https://vulnogram.org/CVE-2026-76468 https://vulnogram.org/CVE-2026-76468 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl… High Network Exploitable Wed, 07 Oct 2026 16:19:04 GMT https://vulnogram.org/CVE-2026-76464 https://vulnogram.org/CVE-2026-76464 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl… Critical Wed, 07 Oct 2026 16:18:42 GMT https://vulnogram.org/CVE-2026-76463 https://vulnogram.org/CVE-2026-76463 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multipl… High Wed, 07 Oct 2026 16:18:42 GMT https://vulnogram.org/CVE-2026-76501 https://vulnogram.org/CVE-2026-76501 A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges o… Critical Network Exploitable Wed, 07 Oct 2026 16:17:35 GMT https://vulnogram.org/CVE-2026-76500 https://vulnogram.org/CVE-2026-76500 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software h… Critical Network Exploitable Wed, 07 Oct 2026 16:17:34 GMT https://vulnogram.org/CVE-2026-76498 https://vulnogram.org/CVE-2026-76498 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software h… Critical Network Exploitable Wed, 07 Oct 2026 16:17:25 GMT https://vulnogram.org/CVE-2026-76499 https://vulnogram.org/CVE-2026-76499 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software h… Critical Network Exploitable Wed, 07 Oct 2026 16:17:25 GMT https://vulnogram.org/CVE-2026-76486 https://vulnogram.org/CVE-2026-76486 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service… Critical Network Exploitable Wed, 07 Oct 2026 16:17:16 GMT https://vulnogram.org/CVE-2026-76488 https://vulnogram.org/CVE-2026-76488 A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attack… Medium Wed, 07 Oct 2026 16:17:16 GMT https://vulnogram.org/CVE-2026-76484 https://vulnogram.org/CVE-2026-76484 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This… High Wed, 07 Oct 2026 16:17:08 GMT https://vulnogram.org/CVE-2026-76485 https://vulnogram.org/CVE-2026-76485 A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Denial-of-Service… Critical Network Exploitable Wed, 07 Oct 2026 16:17:08 GMT https://vulnogram.org/CVE-2026-76483 https://vulnogram.org/CVE-2026-76483 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This… Critical Network Exploitable Wed, 07 Oct 2026 16:16:06 GMT https://vulnogram.org/CVE-2026-76482 https://vulnogram.org/CVE-2026-76482 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This… Critical Network Exploitable Wed, 07 Oct 2026 16:16:00 GMT https://vulnogram.org/CVE-2026-76480 https://vulnogram.org/CVE-2026-76480 As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This… Critical Network Exploitable Wed, 07 Oct 2026 16:15:52 GMT https://vulnogram.org/CVE-2026-76458 https://vulnogram.org/CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int… High Network Exploitable Wed, 07 Oct 2026 16:15:49 GMT https://vulnogram.org/CVE-2026-76459 https://vulnogram.org/CVE-2026-76459 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int… Critical Network Exploitable Wed, 07 Oct 2026 16:15:43 GMT https://vulnogram.org/CVE-2026-76471 https://vulnogram.org/CVE-2026-76471 A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device.  The vulnerability i… Critical Network Exploitable Wed, 07 Oct 2026 16:15:35 GMT https://vulnogram.org/CVE-2026-76455 https://vulnogram.org/CVE-2026-76455 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int… Critical Network Exploitable Wed, 07 Oct 2026 16:15:27 GMT https://vulnogram.org/CVE-2026-76457 https://vulnogram.org/CVE-2026-76457 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int… High Network Exploitable Wed, 07 Oct 2026 16:15:22 GMT https://vulnogram.org/CVE-2026-76456 https://vulnogram.org/CVE-2026-76456 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple int… High Network Exploitable Wed, 07 Oct 2026 16:15:11 GMT https://vulnogram.org/CVE-2026-76465 https://vulnogram.org/CVE-2026-76465 A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to execute arbitrar… Critical Network Exploitable Wed, 07 Oct 2026 16:14:26 GMT https://vulnogram.org/CVE-2026-76454 https://vulnogram.org/CVE-2026-76454 A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS cond… Critical Network Exploitable Wed, 07 Oct 2026 16:12:31 GMT