---
id: CVE-2026-76282
title: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review. This
  review resulted in a software hardening release that addresses multiple
  internally discov…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-664
vendor: splunk
product: splunk
affected:
  - 'splunk >= 9.4.0, < 9.4.15'
  - 'splunk >= 10.0.0, < 10.0.10'
  - 'splunk >= 10.2.0, < 10.2.7'
  - 'splunk >= 10.4.0, < 10.4.3'
patched:
  - splunk 10.4.3
published: '2026-10-07'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:18:36.373'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76282'
references:
  - url: 'https://advisory.splunk.com/advisories/SVD-2026-1002'
    label: psirt@cisco.com
tags:
  - nvd
  - cve.org
epss: 0.00381
epssPercentile: 0.31975
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-08T15:03:08.117970Z'
ingestedAt: '2026-10-07T21:54:15.098Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76282 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.

## Affected

- `splunk >= 9.4.0, < 9.4.15`
- `splunk >= 10.0.0, < 10.0.10`
- `splunk >= 10.2.0, < 10.2.7`
- `splunk >= 10.4.0, < 10.4.3`

## Remediation

Upgrade past the affected range:

- `splunk 10.4.3`