Resource exhaustion in Splunk Enterprise - CVE-2026-76290
Published: October 22, 2026
Vulnerability identifier: #VU156974
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-76290
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service by exhausting system resources and potentially making the Splunk daemon stop responding.
The vulnerability exists due to unrestricted resource consumption in the Splunk Pipeline Builders app's Edge Processor package download endpoint when reading and base64-encoding the complete package in memory for each unauthenticated download request. A remote attacker can send repeated package download requests to consume excessive system resources and potentially make the Splunk daemon unavailable.
Affected software
Splunk Enterprise
How to mitigate CVE-2026-76290
Install security update from vendor's website.
Splunk Enterprise - addressed in versions 9.4.16, 10.0.11, 10.2.8, 10.4.4