{"id":"CVE-2026-76285","published":"2026-10-07T21:17:20Z","modified":"2026-10-16T20:17:57Z","title":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…","vendor":"Splunk","product":"Splunk Enterprise","tier":"core","eol":null,"description":{"text":"As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76285 are related to improper adherence to coding standards and are grouped under the Common Weakness Enumeration (CWE) CWE-710.","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is an improper adherence to coding standards weakness (CWE-710) in Splunk Enterprise, identified during an internal hardening review. An attacker would be able to exploit it over the network, with low complexity, and without authentication or user interaction, though the specific impact is not detailed in the available information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:24:50Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.00366,"percentile":0.30462,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[{"id":"CWE-710","name":"Improper Adherence to Coding Standards"}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2026-1002","tags":["Vendor Advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2026-94586","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94586","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2026-10-07","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76285","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":13.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":6.09,"detail":"percentile 0.3046"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}