CVE-2026-76282

{
  "etk_id": "ETK-2026-1338",
  "cve_id": "CVE-2026-76282",
  "display_id": "CVE-2026-76282",
  "ghsa_id": "GHSA-f3pp-j4fj-8pg2",
  "euvd_id": "EUVD-2026-94634",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Resource lifetime management flaw in Splunk Enterprise",
  "summary": "Splunk Enterprise has a resource-lifetime management weakness addressed in releases 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The available advisory material does not specify what an attacker can achieve or what conditions are required for exploitation.",
  "mitigation": "Upgrade Splunk Enterprise to 10.4.3, 10.2.7, 10.0.10, or 9.4.15, as appropriate for the supported release line.",
  "vendor": "Splunk",
  "product": "Splunk Enterprise",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 10.4, < 10.4.3",
        ">= 10.2, < 10.2.7",
        ">= 10.0, < 10.0.10",
        ">= 9.4, < 9.4.15"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "10.4.3",
        "10.2.7",
        "10.0.10",
        "9.4.15"
      ],
      "package_name": "Splunk Enterprise",
      "purl": null
    }
  ],
  "cwes": [
    664
  ],
  "cvss_score": 8.8,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.003,
  "epss_percentile": 0.2114,
  "epss_asof": "2026-10-21",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 49.10974695,
  "t0_at": "2026-10-07T20:46:38.324000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-12T11:23:46.556103+00:00",
      "days": 4.609123056747685,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T20:46:38.324000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-07T20:46:38.324000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T20:46:38.324000+00:00",
      "url": "https://github.com/advisories/GHSA-f3pp-j4fj-8pg2"
    }
  }
}