Details
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published
- 7 October 2026
- Updated
- 15 October 2026
- Weakness
- CWE-707
CVE-2026-76284 CVE-2026-76284
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
CVSS base score
9.8
/10
Critical- CISA KEV
- Not listed
- Public exploit
- None known
- EPSS
- 0.33% chance of exploitation in 30 days