CVE-2026-76285

Modified Modified - Updated After Analysis

BaseFortify

Publication date: 2026-10-07

Last updated on: 2026-11-07

Assigner: Cisco Systems, Inc.

Description

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-07

Last Modified

2026-11-07

Generated

2026-11-08

AI Q&A

2026-10-08

EPSS Evaluated

2026-11-07

NVD

CVE-2026-76285

Affected Vendors & Products

Vendor	Product	Version / Range
splunk	splunk	From 10.0.0 (inc) to 10.0.10 (exc)
splunk	splunk	From 10.2.0 (inc) to 10.2.7 (exc)
splunk	splunk	From 10.4.0 (inc) to 10.4.3 (exc)
splunk	splunk	From 9.4.0 (inc) to 9.4.15 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-710	The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Attack-Flow Graph

Executive Summary

This vulnerability involves Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15 failing to properly adhere to coding standards. It was internally identified and addressed by Splunk.

Impact Analysis

The impact depends on how Splunk Enterprise is used. Since it involves improper coding standards, it could lead to security weaknesses, potential data breaches, or unauthorized access if exploited.

Compliance Impact

The provided CVE data does not specify how this vulnerability impacts compliance with standards like GDPR or HIPAA. The description only mentions improper adherence to coding standards without detailing regulatory implications.

Mitigation Strategies

Update Splunk Enterprise to the latest patched versions (10.4.3, 10.2.7, 10.0.10, or 9.4.15) as these versions address the identified vulnerabilities.

Hi! I’m here to help you understand CVE-2026-76285. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...