CVE-2026-76285 is one of five Splunk Enterprise CVEs from the September and October 2026 hardening release, grouped under CWE-710. NVD lists CVSS 9.8, while Splunk lists 4.4 for this one. Splunk fixed it in 10.4.3, 10.2.7, 10.0.10 and 9.4.15. Upgrade to one of those or later.
What's affected
- Product: Splunk Enterprise.
- Affected and fixed: 10.4.0 to 10.4.2 (fixed 10.4.3), 10.2.0 to 10.2.6 (fixed 10.2.7), 10.0.0 to 10.0.9 (fixed 10.0.10), and 9.4.0 to 9.4.14 (fixed 9.4.15).
- Weakness: CWE-710, improper adherence to coding standards.
- Score: NVD lists CVSS 9.8 with vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Splunk's own table lists 4.4 for this specific CVE, and 9.8 as the top score across the whole advisory. Plan on the fix either way. - Not listed in CISA KEV.
How to check if you're exposed
Check each Splunk Enterprise instance, including search heads, indexers and forwarders that run the full package.
$SPLUNK_HOME/bin/splunk version
Compare the result with the four affected ranges above. Splunk Cloud and other managed services are patched by the provider, so ask your account contact if you are unsure of your status.
What to do now
- List every Splunk Enterprise host and its version.
- Upgrade to 10.4.3, 10.2.7, 10.0.10 or 9.4.15 or later, whichever matches your release line.
- Upgrade in the order Splunk documents for distributed deployments, and test on a non production search head first.
- Read advisory SVD-2026-1002 for the four sibling CVEs, since the same upgrade covers all five.
Why it matters
Splunk says it found these issues in an internal review and grouped them by weakness class, with one CVE per group. CWE-710 is a broad category, so the record itself says little about the mechanism, and the advisory does not describe it either.
That is useful to know when you triage. The score on a grouped CVE can reflect the worst finding in the group, and the CVE text will not tell you which feature is involved. Treat grouped hardening releases as a single upgrade job, not as separate fixes to schedule one by one.
Quick check
Why do the two scores differ?
NVD shows 9.8 for this CVE. The Splunk advisory table lists 9.8 as the highest score in the advisory and 4.4 for CVE-2026-76285. Read the advisory for the vendor view.
Sources
Last reviewed: 19 October 2026.
