CVE-2026-76284: Improper Neutralization in Splunk Enterprise
Published Oct 7, 2026
·Updated
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
Affected Software
1 affected component
Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Splunk Enterpriseto a version that resolves this vulnerability.Fixed in 10.4.3
Event History
Oct 7, 2026
CVE Published
via MITRE·08:46 PM
Data Sourced
via MITRE·08:46 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·09:17 PM
DescriptionWeakness