Unauthenticated Resource Exhaustion in Splunk Enterprise by Splunk

CVE-2026-76290

What is CVE-2026-76290?

In certain versions of Splunk Enterprise, an unauthenticated user can exploit a weakness in the Edge Processor package download endpoint. By sending repeated requests, the vulnerability allows for excessive consumption of system resources, potentially leading to a denial of service. This occurs because the endpoint does not enforce authentication and processes each request by loading the entire package into memory. To mitigate this issue, users should update their Splunk Enterprise to the latest versions and enable authentication for Edge Processor package downloads. Further information is available in the official Splunk documentation.

References