Servers and applications
CVE-2026-76271
In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service against a Representational State Transfer (REST) API endpoint in the Discover Splunk Observability Cloud app. The vulnerability is possible because the app uses an inefficient regular expression to validate input submitted…
- Severity
- Medium 6.5
- Published
- 7 Oct 2026
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 10.0.10, 10.2.7, 10.4.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|