CVE-2026-76288 — Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise

CVE-2026-76288

Denial of Service (DoS) through Splunk Web Content-Type Header Parsing in Splunk Enterprise PUBLISHED

Description (CNA)

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint and cause Splunk Web to stop responding to requests. Splunk Web remains unavailable until Splunk Enterprise is restarted. The vulnerability is possible because Splunk Web does not limit request-header parsing before processing the request.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 10.4 before 10.4.4; affected 10.2 before 10.2.8; affected 10.0 before 10.0.11; affected 9.4 before 9.4.16

CWE

CWE-400

References

https://advisory.splunk.com/advisories/SVD-2026-1007

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.