Vulnerability Intelligence Report
Improper Neutralization in Splunk Enterprise
CVE-2026-76284
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:0.15%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-707 ↗The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties at met before being read from an upstream component or sent to a downstream component.
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Splunk | Splunk Enterprise | 10.4 < 10.4.3 (affected), 10.2 < 10.2.7 (affected), 10.0 < 10.0.10 (affected), 9.4 < 9.4.15 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.155%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2026-08-19T12:02:03 |
| Published | 2026-10-07T20:46:39 |
| Patch Date | 2026-10-07 |
| Last Updated | 2026-10-10T02:47:25 |
Community Chatter & Buzz