---
id: CVE-2026-76284
title: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review
summary: >-
  As part of Cisco's ongoing commitment to proactive security and product
  quality, Cisco has conducted a comprehensive internal security review. This
  review resulted in a software hardening release that addresses multiple
  internally discov…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-707
vendor: splunk
product: splunk
affected:
  - 'splunk >= 9.4.0, < 9.4.15'
  - 'splunk >= 10.0.0, < 10.0.10'
  - 'splunk >= 10.2.0, < 10.2.7'
  - 'splunk >= 10.4.0, < 10.4.3'
patched:
  - splunk 10.4.3
published: '2026-10-07'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:18:36.673'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76284'
references:
  - url: 'https://advisory.splunk.com/advisories/SVD-2026-1002'
    label: psirt@cisco.com
tags:
  - nvd
  - cve.org
epss: 0.0043
epssPercentile: 0.3702
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-10T02:47:04.823958Z'
ingestedAt: '2026-10-07T21:54:15.098Z'
---

## Overview

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

## Affected

- `splunk >= 9.4.0, < 9.4.15`
- `splunk >= 10.0.0, < 10.0.10`
- `splunk >= 10.2.0, < 10.2.7`
- `splunk >= 10.4.0, < 10.4.3`

## Remediation

Upgrade past the affected range:

- `splunk 10.4.3`