CyberICT

CVE-2026-76285

Splunk · Published October 7, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Affected Products

  • Splunk < 9.4.15
  • Splunk < 10.0.10
  • Splunk < 10.2.7
  • Splunk < 10.4.3

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H