Splunk Enterprise: Improper adherence to coding standards (CWE-710)

Summary

CVE-2026-76285 is one of several internally discovered hardening findings in Splunk Enterprise, grouped under CWE-710 (Improper Adherence to Coding Standards). Splunk rates this CVE at 4.4 (Medium). The CVSS 9.8 (Critical) shown in some databases comes from CISA's ADP enrichment, which is disputed, and it is not Splunk's rating for this CVE. Splunk has not described the individual flaws, the affected components, the attack vector or the prerequisites, so the impact on an attacker is unknown.

Affected

• Splunk Enterprise 10.4.0 to 10.4.2
• Splunk Enterprise 10.2.0 to 10.2.6
• Splunk Enterprise 10.0.0 to 10.0.9
• Splunk Enterprise 9.4.0 to 9.4.14

Fixed in

• Splunk Enterprise 10.4.3
• Splunk Enterprise 10.2.7
• Splunk Enterprise 10.0.10
• Splunk Enterprise 9.4.15
• Or later versions

Workaround

No workaround documented. The vendor fix is the upgrade.

Exploitation

• No exploitation in the wild reported.
• No public proof of concept found.
• CISA SSVC: exploitation none, automatable yes, technical impact total.
• EPSS below 1%.
• KEV status not confirmed.

Our recommendation

• Inventory all Splunk Enterprise instances and compare the versions with the fixed branches.
• Upgrade to 10.4.3, 10.2.7, 10.0.10, 9.4.15 or later, ideally together with the other fixes in SVD-2026-1001.
• Review the exposure of the Splunk management interface and restrict access to trusted networks.
• Monitor the vendor advisory and NVD for a revised severity or vector.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• Splunk advisory SVD-2026-1002 advisory.splunk.com
• CISA vulnrichment issue on disputed CISA ADP 9.8 score github.com
• OpenCVE CVE-2026-76285 app.opencve.io
• Canadian Cyber Centre Splunk security advisory AV26-1018 www.cyber.gc.ca
• Rescana analysis of Splunk Enterprise security hardening release www.rescana.com
• Dev.to analysis of SVD-2026-1001 related CVE-2026-76270 dev.to

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 20:36.