Splunk Enterprise and Cloud Platform
CVE-2026-76282: Improper Control of a Resource Through its Lifetime in Splunk Enterprise
Improper Control of a Resource Through its Lifetime.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityHIGHCVSS 3.1 8.8
EPSS0.30%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Splunk Enterprise 10.4 | 10.4.3 or later |
| Splunk Enterprise 10.2 | 10.2.7 or later |
| Splunk Enterprise 10.0 | 10.0.10 or later |
| Splunk Enterprise 9.4 | 9.4.15 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.