Denial of Service Vulnerability in Splunk Enterprise by Splunk
CVE-2026-76271

6.5MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
7 October 2026

What is CVE-2026-76271?

A vulnerability exists in versions of Splunk Enterprise prior to 10.4.3, 10.2.7, and 10.0.10, where a low-privileged user could exploit an inefficient regular expression used in the input validation of a REST API endpoint within the Discover Splunk Observability Cloud app. This could lead to a denial of service condition. It is crucial for users to upgrade to the latest versions to mitigate the risk associated with this vulnerability.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.3

Splunk Enterprise 10.2 < 10.2.7

Splunk Enterprise 10.0 < 10.0.10

References

https://advisory.splunk.com/advisories/SVD-2026-1001

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Gabriel Nitu, Splunk
.