CVE-2026-76290

{
  "etk_id": "ETK-2026-2371",
  "cve_id": "CVE-2026-76290",
  "display_id": "CVE-2026-76290",
  "ghsa_id": null,
  "euvd_id": "EUVD-2026-107661",
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Unauthenticated resource exhaustion in Splunk Enterprise",
  "summary": "Splunk Enterprise versions before 10.4.4, 10.2.8, and 10.0.11 are affected through the Edge Processor package download endpoint in the Splunk Pipeline Builders app. An unauthenticated remote attacker can repeatedly request package downloads, causing excessive memory or system resource consumption and potentially making the Splunk daemon unresponsive.",
  "mitigation": "Upgrade Splunk Enterprise to 10.4.4, 10.2.8, or 10.0.11, as appropriate for the deployed release line. Prepare existing Edge Processor instances, enable authentication for Edge Processor package downloads, and restart Splunk Enterprise.",
  "vendor": "Splunk",
  "product": "Splunk Enterprise",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 10.4, < 10.4.4",
        ">= 10.2, < 10.2.8",
        ">= 10.0, < 10.0.11"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "10.4.4",
        "10.2.8",
        "10.0.11"
      ],
      "package_name": "Splunk Enterprise",
      "purl": null
    }
  ],
  "cwes": [
    400
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": null,
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": null,
  "t0_at": "2026-10-21T22:51:52.864000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-21T22:51:52.864000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T22:51:52.864000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76290"
    }
  }
}