Vulnerability Details CVE-2026-76281
Improper Access Control. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.8%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-76281
-
cpe:2.3:a:splunk:splunk:10.0.0
-
cpe:2.3:a:splunk:splunk:10.0.1
-
cpe:2.3:a:splunk:splunk:10.0.2
-
cpe:2.3:a:splunk:splunk:10.0.3
-
cpe:2.3:a:splunk:splunk:10.0.4
-
cpe:2.3:a:splunk:splunk:10.0.5
-
cpe:2.3:a:splunk:splunk:10.0.7
-
cpe:2.3:a:splunk:splunk:10.0.8
-
cpe:2.3:a:splunk:splunk:10.0.9
-
cpe:2.3:a:splunk:splunk:10.2.0
-
cpe:2.3:a:splunk:splunk:10.2.1
-
cpe:2.3:a:splunk:splunk:10.2.2
-
cpe:2.3:a:splunk:splunk:10.2.4
-
cpe:2.3:a:splunk:splunk:10.2.5
-
cpe:2.3:a:splunk:splunk:10.2.6
-
cpe:2.3:a:splunk:splunk:9.4.0
-
cpe:2.3:a:splunk:splunk:9.4.1
-
cpe:2.3:a:splunk:splunk:9.4.10
-
cpe:2.3:a:splunk:splunk:9.4.11
-
cpe:2.3:a:splunk:splunk:9.4.12
-
cpe:2.3:a:splunk:splunk:9.4.13
-
cpe:2.3:a:splunk:splunk:9.4.14
-
cpe:2.3:a:splunk:splunk:9.4.2
-
cpe:2.3:a:splunk:splunk:9.4.3
-
cpe:2.3:a:splunk:splunk:9.4.4
-
cpe:2.3:a:splunk:splunk:9.4.5
-
cpe:2.3:a:splunk:splunk:9.4.6
-
cpe:2.3:a:splunk:splunk:9.4.7
-
cpe:2.3:a:splunk:splunk:9.4.8
-
cpe:2.3:a:splunk:splunk:9.4.9