Splunk Enterprise and Cloud Platform
CVE-2026-76285: Improper Adherence to Coding Standards in Splunk Enterprise
Improper Adherence to Coding Standards.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityUnknown
EPSS0.14%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Splunk Enterprise 10.4 | 10.4.3 or later |
| Splunk Enterprise 10.2 | 10.2.7 or later |
| Splunk Enterprise 10.0 | 10.0.10 or later |
| Splunk Enterprise 9.4 | 9.4.15 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.