Improper Neutralization Vulnerability in Splunk Enterprise by Splunk
CVE-2026-76284

9.8CRITICAL

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
7 October 2026

What is CVE-2026-76284?

Splunk has identified multiple vulnerabilities within Splunk Enterprise that stem from improper neutralization of input. This issue affects specific versions of the product, posing a potential risk of unauthorized access or data manipulation. Users are encouraged to update to the latest versions to mitigate any associated risks. For more detailed information, refer to the advisory available on Splunk's official site.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.3

Splunk Enterprise 10.2 < 10.2.7

Splunk Enterprise 10.0 < 10.0.10

References

https://advisory.splunk.com/advisories/SVD-2026-1002

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.