CVE-2026-76526

Not scored yetLast modified Oct 22, 2026

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76526 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Metrics

No CVSS score has been published yet.

Weakness enumeration

CWE-707

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
SplunkSplunk SOAR< 8.7.0

References

Timeline

Published
Oct 21, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-76527As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revieCVE-2026-76528As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revieCVE-2026-76529As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revieCVE-2026-76536.3A security flaw has been discovered in r-huijts mcp-server-rijksmuseum up to 1.0.4. Affected is the function open_image_in_browser of the fiCVE-2026-765308.8As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revieCVE-2026-765319.9As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security revieCVE-2026-76548.8The Admin Columns plugin for WordPress is vulnerable to PHP Object Injection leading to Remote Code Execution in versions up to and includinCVE-2026-765466.8The User Profile Builder WordPress plugin before 4.0.1 does not escape the output of one of its optional shortcodes, allowing users with a CVE-2026-765476.6The User Profile Builder WordPress plugin before 4.0.1 does not validate the type of data being deserialized when importing a configurationCVE-2026-765488.2The User Profile Builder WordPress plugin before 4.0.1 does not properly restrict its front-end file upload feature, granting unauthenticatCVE-2026-765495.9The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actioCVE-2026-76558.1The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 4.2.3. This i