CVE-2026-76390

{"id": "CVE-2026-76390", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76390", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T16:07:34.623272Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@cisco.com", "affectedData": [{"vendor": "Splunk", "product": "Cisco Talos Intelligence for Enterprise Security Cloud", "versions": [{"status": "affected", "version": "1.0", "lessThan": "1.0.3", "versionType": "custom"}]}]}], "published": "2026-08-19T22:17:25.357", "references": [{"url": "https://advisory.splunk.com/advisories/SVD-2026-0808", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "In Cisco Talos Intelligence for Enterprise Security Cloud versions below 1.0.3, an unauthenticated user could access the add-on OpenAPI specification through Splunk Web static file paths. The exposed specification could allow for reconnaissance of the add-on Representational State Transfer (REST) API endpoints and authentication model. The vulnerability is possible because the generated OpenAPI specification is packaged in a static file path that Splunk Web serves without authentication. For more information see Deploy Cisco Talos Intelligence for Splunk Enterprise Security (https://help.splunk.com/en/splunk-enterprise-security-8/user-guide/8.0/introduction/deploy-cisco-talos-intelligence-for-splunk-enterprise-security-cloud-only) in the Splunk documentation."}, {"lang": "es", "value": "En las versiones de Cisco Talos Intelligence para Enterprise Security Cloud anteriores a la 1.0.3, un usuario no autenticado podr\u00eda acceder a la especificaci\u00f3n OpenAPI del complemento a trav\u00e9s de rutas de archivos est\u00e1ticos de Splunk Web. La especificaci\u00f3n expuesta podr\u00eda permitir el reconocimiento de los puntos finales de la API Representational State Transfer (REST) del complemento y el modelo de autenticaci\u00f3n. La vulnerabilidad es posible porque la especificaci\u00f3n OpenAPI generada se empaqueta en una ruta de archivo est\u00e1tico que Splunk Web sirve sin autenticaci\u00f3n. Para m\u00e1s informaci\u00f3n, consulte Implementar Cisco Talos Intelligence para Splunk Enterprise Security (https://help.splunk.com/en/splunk-enterprise-security-8/user-guide/8.0/introduction/deploy-cisco-talos-intelligence-for-splunk-enterprise-security-cloud-only) en la documentaci\u00f3n de Splunk."}], "lastModified": "2026-10-24T13:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:talos_intelligence_for_enterprise_security_cloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D08EA442-FC9A-4E3A-BB73-E19CCEAF6295", "versionEndExcluding": "1.0.3", "versionStartIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}