CVE-2026-76285
Modified Modified - Updated After Analysis

BaseFortify

Vulnerability report for CVE-2026-76285, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-07

Last updated on: 2026-10-16

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-16
Generated
2026-10-19
AI Q&A
2026-10-08
EPSS Evaluated
2026-10-18
NVD

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
splunk splunk From 10.0.0 (inc) to 10.0.10 (exc)
splunk splunk From 10.2.0 (inc) to 10.2.7 (exc)
splunk splunk From 10.4.0 (inc) to 10.4.3 (exc)
splunk splunk From 9.4.0 (inc) to 9.4.15 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-710 The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 failing to properly adhere to coding standards. It was internally identified and addressed by Splunk.

Impact Analysis

The impact depends on how Splunk Enterprise is used. Since it involves improper coding standards, it could lead to security weaknesses, potential data breaches, or unauthorized access if exploited.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The description only mentions improper adherence to coding standards without detailing regulatory implications.

Mitigation Strategies

Update Splunk Enterprise to the latest patched versions (10.4.3, 10.2.7, 10.0.10, or 9.4.15) as these versions address the identified vulnerabilities.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76285. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart