CVE-2026-76284

Published: Oct 7, 2026Modified: Oct 16, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Affected (4)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	10.0.0 ≤ version < 10.0.10
Splunk Splunk	10.2.0 ≤ version < 10.2.7
Splunk Splunk	10.4.0 ≤ version < 10.4.3
Splunk Splunk	9.4.0 ≤ version < 9.4.15

Related CWEs

CWE-707

Improper Neutralization

The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

References (1)

https://advisory.splunk.com/advisories/SVD-2026-1002

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.