← Back to CVE List
CVE-2026-76282NVD
Vulnerability Summary
Improper Control of a Resource Through its Lifetime. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
CVSS v3.1 Base Metrics — Score 8.8 (HIGH)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Splunk Splunk >= 9.4.0 and < 9.4.15
- Splunk Splunk >= 10.0.0 and < 10.0.10
- Splunk Splunk >= 10.2.0 and < 10.2.7
- Splunk Splunk >= 10.4.0 and < 10.4.3
- Splunk Splunk 9.4.15
- Splunk Splunk 10.0.10
- Splunk Splunk 10.2.7
- Splunk Splunk 10.4.3