Servers and applications
CVE-2026-76290
In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potentially stop responding. The vulnerability is possible because the endpoint accepts package download…
- Severity
- High 7.5
- Published
- 21 Oct 2026
- Last changed
- 30 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 10.0.11, 10.2.8, 10.4.4
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk |
|