CRITICAL 9.8 NVD

CVE-2026-76284

Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The

Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

References

https://advisory.splunk.com/advisories/SVD-2026-1002

Published: 2026-10-07 · Source: NVD · Feed updated: 2026-10-12

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-10-07 via NVD.

Risk Timeline

CVE Disclosed2026-10-07 · 4 days ago

Remediation Resources

Official Advisory

advisory.splunk.com/advisories/SVD-2026-1002

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.