CVE-2026-76281: Improper Access Control in Splunk Enterprise

Published Oct 7, 2026

Updated

Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Affected Software

1 affected component

Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.4.3
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.2.7
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.0.10
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 9.4.15

Event History

Oct 7, 2026

CVE Published

via MITRE·08:46 PM

Data Sourced

via MITRE·08:46 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·09:17 PM

DescriptionWeakness

Frequently Asked Questions

Were these issues reported externally?

The vulnerabilities were internally identified by Splunk.

Does this CVE represent one specific flaw?

It covers a group of multiple vulnerabilities classified under the same Common Weakness Enumeration category, with one CVE assigned to that group.