Denial of Service Vulnerability in Splunk Enterprise by Splunk
CVE-2026-76288

7.5HIGH

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Vendor
CVE Published:
21 October 2026

What is CVE-2026-76288?

In specific earlier versions of Splunk Enterprise, an unauthenticated user can exploit the Splunk Web JavaScript logger endpoint by sending a specially crafted request. This action leads to the unavailability of Splunk Web, requiring a restart of the entire Splunk Enterprise system to restore functionality. The vulnerability arises due to inadequate limits on request-header parsing, which allows the service to be disrupted.

Affected Version(s)

Splunk Enterprise 10.4 < 10.4.4

Splunk Enterprise 10.2 < 10.2.8

Splunk Enterprise 10.0 < 10.0.11

References

https://advisory.splunk.com/advisories/SVD-2026-1007

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Pedro Cardoso (tvmpt)
.