CVE-2026-76288: The software does not properly control the allocation and maintenance of a limited resource thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources. in Splunk Splunk Enterprise

This vulnerability in Splunk Enterprise allows an unauthenticated actor to trigger a denial-of-service condition by sending a single crafted request to the Splunk Web JavaScript logger endpoint. The root cause is inadequate control over the allocation and maintenance of limited resources during request-header parsing, which can be exploited to exhaust resources and cause Splunk Web to stop responding. The affected versions are those prior to 10.4.4, 10.2.8, 10.0.11, and 9.4.16.

Successful exploitation results in denial of service, making Splunk Web unavailable until the Splunk Enterprise instance is restarted. There is no impact on confidentiality or integrity, but availability is severely affected.

A fix is available in Splunk Enterprise versions 10.4.4, 10.2.8, 10.0.11, and 9.4.16. Users should upgrade to these versions or later to remediate this vulnerability. No other mitigation or workaround is indicated.