CVE-2026-76282: Improper Control of a Resource Through its Lifetime in Splunk Enterprise

Published Oct 7, 2026

Updated

Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Affected Software

1 affected component

Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.4.3
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.2.7
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.0.10
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 9.4.15

Event History

Oct 7, 2026

CVE Published

via MITRE·08:46 PM

Data Sourced

via MITRE·08:46 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·09:17 PM

DescriptionWeakness

Frequently Asked Questions

Which Splunk Enterprise versions include the remediation?

Splunk addressed the grouped vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15.