-
CVE-2026-76284
- EPSS -
- Veröffentlicht 07.10.2026 20:46:39
- Zuletzt bearbeitet 07.10.2026 21:17:20
- Erkennungen
Improper Neutralization in Splunk Enterprise
Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerSplunk
≫
Produkt
Splunk Enterprise
Version
10.4
Version <
10.4.3
Status
affected
Version
10.2
Version <
10.2.7
Status
affected
Version
10.0
Version <
10.0.10
Status
affected
Version
9.4
Version <
9.4.15
Status
affected
VulnDex Vulnerability Enrichment
CWE-707 Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
https://advisory.splunk.com/advisories/SVD-2026-1002