← Back
2026-10-07 20:46CVE-2026-76284cisco
PUBLISHED5.2CWE-707

Improper Neutralization in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

Problem type

Affected products

Splunk

Splunk Enterprise

< 10.4.3 - AFFECTED

< 10.2.7 - AFFECTED

< 10.0.10 - AFFECTED

< 9.4.15 - AFFECTED

References

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

GitHub Security Advisories

GHSA-787c-75gx-5xvm

Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in...

https://github.com/advisories/GHSA-787c-75gx-5xvm

Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-76284

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

github.com

https://github.com/advisories/GHSA-787c-75gx-5xvm

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-76284
Click to expand
{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-76284",
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "dateUpdated": "2026-10-16T17:55:32.276Z",
    "dateReserved": "2026-08-19T12:02:03.621Z",
    "datePublished": "2026-10-07T20:46:39.281Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco",
        "dateUpdated": "2026-10-16T17:55:32.276Z"
      },
      "datePublic": "2026-10-07T00:00:00.000Z",
      "title": "Improper Neutralization in Splunk Enterprise",
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707."
        }
      ],
      "affected": [
        {
          "vendor": "Splunk",
          "product": "Splunk Enterprise",
          "versions": [
            {
              "version": "10.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.4.3"
            },
            {
              "version": "10.2",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.2.7"
            },
            {
              "version": "10.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.0.10"
            },
            {
              "version": "9.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "9.4.15"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties at met before being read from an upstream component or sent to a downstream component.",
              "cweId": "CWE-707",
              "type": "cwe"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://advisory.splunk.com/advisories/SVD-2026-1002"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher."
        }
      ]
    },
    "adp": [
      {
        "providerMetadata": {
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP",
          "dateUpdated": "2026-10-10T02:47:25.401Z"
        },
        "title": "CISA ADP Vulnrichment",
        "metrics": [
          {
            "cvssV3_1": {
              "version": "3.1",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "attackVector": "NETWORK",
              "attackComplexity": "LOW",
              "privilegesRequired": "NONE",
              "userInteraction": "NONE",
              "scope": "UNCHANGED",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL"
            }
          },
          {}
        ]
      }
    ]
  }
}