Vulnerability Intelligence Report
Improper Adherence to Coding Standards in Splunk Enterprise
CVE-2026-76285
Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
No Active Exploit Signals
CVSS Base Score
9.8
CRITICAL
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-710 ↗The software does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Splunk | Splunk Enterprise | 10.4 < 10.4.3 (affected), 10.2 < 10.2.7 (affected), 10.0 < 10.0.10 (affected), 9.4 < 9.4.15 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2026-08-19T12:02:03 |
| Published | 2026-10-07T20:46:39 |
| Patch Date | 2026-10-07 |
| Last Updated | 2026-10-07T20:46:39 |
Community Chatter & Buzz