OCTOBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-76284

CRITICAL · CVSS 9.8 EPSS 0.33%

Source: NVD + CISA KEV + EPSS · Published 2026-10-07 · Last synced 2026-10-14

CyberRota Analysis

AI-Generated

Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 are affected by multiple vulnerabilities related to improper neutralization, which could potentially allow for injection attacks or other exploitation methods. Organizations using these specific versions should prioritize patching to mitigate risks associated with data integrity and security breaches. It is crucial for security teams to assess their deployment and apply necessary updates to safeguard against potential threats.

CVE
CVE-2026-76284
Severity
CRITICAL
CVSS
9.8
EPSS
0.33%

Original NVD Description

Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

Related CVEs

Other vulnerabilities affecting the same vendor(s)