Splunk patches 24 flaws, four critical, in Enterprise and SOAR
October 21 fixes cover CVSS 9.9 bugs; Secure Gateway also needs updates for two CVEs.
62
CVE-2026-76290
Unauthenticated resource exhaustion in Splunk Enterprise Edge Processor downloads
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11 let an unauthenticated remote user repeatedly request Edge Processor package downloads in the Pipeline Builders app. Each request reads and base64-encodes the full package in memory, so the Splunk daemon can exhaust resources and stop responding. Deployments exposing that endpoint are affected.
What to do: Upgrade to 10.4.4, 10.2.8, or 10.0.11, then prepare existing Edge Processor instances, enable authentication for package downloads, and restart Splunk Enterprise.
| Product | Affected | Fixed in |
|---|---|---|
| Splunk Enterprise | below 10.4.4, 10.2.8, and 10.0.11 | 10.4.4, 10.2.8, and 10.0.11 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk Pipeline Builders app. The requests could cause the Splunk daemon to consume excessive system resources and potentially stop responding. The vulnerability is possible because the endpoint accepts package download requests without authentication and reads and base64-encodes the complete package in memory for each request. After upgrading, prepare all existing Edge Processor instances, turn on authentication for Edge Processor package downloads, and restart Splunk Enterprise. For more information, see Enable authentication for Edge Processor package downloads (https://help.splunk.com/en/data-management/process-data-at-the-edge/use-edge-processors-for-splunk-enterprise/10.4/administer-edge-processors/enable-authentication-for-edge-processor-package-downloads).