CVE-2026-76282: Improper Control of a Resource Through its Lifetime in Splunk Enterprise
Published Oct 7, 2026
·Updated
As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76282 are related to improper control of a resource through its lifetime and are grouped under the Common Weakness Enumeration (CWE) CWE-664.
Affected Software
5 affected components
Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15
Splunk splunk>=9.4.0<9.4.15
Splunk splunk>=10.0.0<10.0.10
Splunk splunk>=10.2.0<10.2.7
Splunk splunk>=10.4.0<10.4.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Splunk Enterpriseto a version that resolves this vulnerability.Fixed in 10.4.3
Event History
Oct 7, 2026
CVE Published
via MITRE·08:46 PM
Data Sourced
via MITRE·08:46 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Which Splunk Enterprise versions include the remediation?
Splunk addressed the grouped vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15.