CVE-2026-76284: Improper Neutralization in Splunk Enterprise

Published Oct 7, 2026

Updated

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Affected Software

5 affected components

Splunk Splunk Enterprise=10.4.3, =10.2.7, =10.0.10, =9.4.15

Splunk splunk>=9.4.0<9.4.15

Splunk splunk>=10.0.0<10.0.10

Splunk splunk>=10.2.0<10.2.7

Splunk splunk>=10.4.0<10.4.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.4.3Patch CVE-2026-76284
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.2.7Patch CVE-2026-76284
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 10.0.10Patch CVE-2026-76284
Upgrade
Upgrade Splunk Enterprise to a version that resolves this vulnerability.
Fixed in 9.4.15Patch CVE-2026-76284

Event History

Oct 7, 2026

CVE Published

via MITRE·08:46 PM

Data Sourced

via MITRE·08:46 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeaknessAffected Software

CVE-2026-76284: Improper Neutralization in Splunk Enterprise

Affected Software

Remediation

Event History

Company

Resources

Contact