← Back
2026-10-07 20:46CVE-2026-76285cisco
PUBLISHED5.2CWE-710

Improper Adherence to Coding Standards in Splunk Enterprise

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.

Problem type

Affected products

Splunk

Splunk Enterprise

< 10.4.3 - AFFECTED

< 10.2.7 - AFFECTED

< 10.0.10 - AFFECTED

< 9.4.15 - AFFECTED

References

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

GitHub Security Advisories

GHSA-fw3v-w3rf-g749

Improper Adherence to Coding Standards. Splunk addressed multiple internally identified...

https://github.com/advisories/GHSA-fw3v-w3rf-g749

Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2026-76285

advisory.splunk.com

https://advisory.splunk.com/advisories/SVD-2026-1002

github.com

https://github.com/advisories/GHSA-fw3v-w3rf-g749

JSON source

https://cveawg.mitre.org/api/cve/CVE-2026-76285
Click to expand
{
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "cveMetadata": {
    "cveId": "CVE-2026-76285",
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "dateUpdated": "2026-10-16T19:28:37.523Z",
    "dateReserved": "2026-08-19T12:02:03.621Z",
    "datePublished": "2026-10-07T20:46:39.808Z",
    "state": "PUBLISHED"
  },
  "containers": {
    "cna": {
      "providerMetadata": {
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco",
        "dateUpdated": "2026-10-16T17:55:32.956Z"
      },
      "datePublic": "2026-10-07T00:00:00.000Z",
      "title": "Improper Adherence to Coding Standards in Splunk Enterprise",
      "descriptions": [
        {
          "lang": "en",
          "value": "As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710."
        }
      ],
      "affected": [
        {
          "vendor": "Splunk",
          "product": "Splunk Enterprise",
          "versions": [
            {
              "version": "10.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.4.3"
            },
            {
              "version": "10.2",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.2.7"
            },
            {
              "version": "10.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "10.0.10"
            },
            {
              "version": "9.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "9.4.15"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "lang": "en",
              "description": "The software does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.",
              "cweId": "CWE-710",
              "type": "cwe"
            }
          ]
        }
      ],
      "references": [
        {
          "url": "https://advisory.splunk.com/advisories/SVD-2026-1002"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade Splunk Enterprise to versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15, or higher."
        }
      ]
    },
    "adp": [
      {
        "providerMetadata": {
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP",
          "dateUpdated": "2026-10-16T19:28:37.523Z"
        },
        "title": "CISA ADP Vulnrichment",
        "metrics": [
          {
            "cvssV3_1": {
              "version": "3.1",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "attackVector": "NETWORK",
              "attackComplexity": "LOW",
              "privilegesRequired": "NONE",
              "userInteraction": "NONE",
              "scope": "UNCHANGED",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL"
            }
          },
          {}
        ]
      }
    ]
  }
}