CVE-2026-76284

Modified Modified - Updated After Analysis

BaseFortify

Publication date: 2026-10-07

Last updated on: 2026-10-16

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76284 are related to improper neutralization and are grouped under the Common Weakness Enumeration (CWE) CWE-707.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-07

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-76284

Affected Vendors & Products

Vendor	Product	Version / Range
splunk	splunk	From 10.0.0 (inc) to 10.0.10 (exc)
splunk	splunk	From 10.2.0 (inc) to 10.2.7 (exc)
splunk	splunk	From 10.4.0 (inc) to 10.4.3 (exc)
splunk	splunk	From 9.4.0 (inc) to 9.4.15 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-707	The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper neutralization of input in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. It was identified internally and addressed by Splunk. The exact nature of the improper neutralization is not specified in the provided context.

Impact Analysis

The vulnerability could allow attackers to manipulate input data, potentially leading to unauthorized access, data breaches, or other malicious activities depending on the specific weakness. Exact impacts depend on the CWE classification and affected components.

Compliance Impact

The provided CVE data does not specify how this vulnerability affects compliance with standards like GDPR or HIPAA. The description only mentions improper neutralization issues in Splunk Enterprise without detailing potential impacts on regulatory compliance.

Mitigation Strategies

Update Splunk Enterprise to the latest patched versions (10.4.3, 10.2.7, 10.0.10, or 9.4.15) as these versions address the vulnerabilities. Monitor Splunk's official advisories for further updates.

Hi! I’m here to help you understand CVE-2026-76284. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70