CVE-2026-76271

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10

Description A low-privileged user without admin or power roles can cause a denial of service against a REST API endpoint in the Discover Splunk Observability Cloud app. This occurs because the application employs an inefficient regular expression to validate input submitted through the endpoint, which can lead to excessive resource consumption.

Recommendations Update to version 10.4.3 or later. Update to version 10.2.7 or later. Update to version 10.0.10 or later.