CVE-2026-76285: Splunk Enterprise

EPSS: 0.1% chance of exploitation in the next 30 days.

Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Affected products

• Splunk Splunk Enterprise: from 10.4, before 10.4.3 (fixed in 10.4.3); from 10.2, before 10.2.7 (fixed in 10.2.7); from 10.0, before 10.0.10 (fixed in 10.0.10); from 9.4, before 9.4.15 (fixed in 9.4.15)

Published 2026-10-07. Last modified 2026-10-08.