Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-76289

In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transfer (REST) API endpoint for lookup table files. The affected instance requires a restart to restore service. The vulnerability is possible because the endpoint does not limit resource use when it processes response field selections. For more information see Endpoints reference list (https://help.splunk.com/en/splunk-enterprise/rest-api-reference/10.4/introduction/endpoints-reference-list) and About configuring role-based user access (https://help.splunk.com/en/splunk-enterprise/administer/manage-users-and-security/10.4/manage-splunk-platform-users-and-roles/about-configuring-role-based-user-access) in the Splunk documentation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 31.5%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-76289
  • Splunk » Splunk » Version: 10.0.0
    cpe:2.3:a:splunk:splunk:10.0.0
  • Splunk » Splunk » Version: 10.0.1
    cpe:2.3:a:splunk:splunk:10.0.1
  • Splunk » Splunk » Version: 10.0.10
    cpe:2.3:a:splunk:splunk:10.0.10
  • Splunk » Splunk » Version: 10.0.2
    cpe:2.3:a:splunk:splunk:10.0.2
  • Splunk » Splunk » Version: 10.0.3
    cpe:2.3:a:splunk:splunk:10.0.3
  • Splunk » Splunk » Version: 10.0.4
    cpe:2.3:a:splunk:splunk:10.0.4
  • Splunk » Splunk » Version: 10.0.5
    cpe:2.3:a:splunk:splunk:10.0.5
  • Splunk » Splunk » Version: 10.0.6
    cpe:2.3:a:splunk:splunk:10.0.6
  • Splunk » Splunk » Version: 10.0.7
    cpe:2.3:a:splunk:splunk:10.0.7
  • Splunk » Splunk » Version: 10.0.8
    cpe:2.3:a:splunk:splunk:10.0.8
  • Splunk » Splunk » Version: 10.0.9
    cpe:2.3:a:splunk:splunk:10.0.9
  • Splunk » Splunk » Version: 10.2.0
    cpe:2.3:a:splunk:splunk:10.2.0
  • Splunk » Splunk » Version: 10.2.1
    cpe:2.3:a:splunk:splunk:10.2.1
  • Splunk » Splunk » Version: 10.2.2
    cpe:2.3:a:splunk:splunk:10.2.2
  • Splunk » Splunk » Version: 10.2.3
    cpe:2.3:a:splunk:splunk:10.2.3
  • Splunk » Splunk » Version: 10.2.4
    cpe:2.3:a:splunk:splunk:10.2.4
  • Splunk » Splunk » Version: 10.2.5
    cpe:2.3:a:splunk:splunk:10.2.5
  • Splunk » Splunk » Version: 10.2.6
    cpe:2.3:a:splunk:splunk:10.2.6
  • Splunk » Splunk » Version: 10.2.7
    cpe:2.3:a:splunk:splunk:10.2.7
  • Splunk » Splunk » Version: 10.4.0
    cpe:2.3:a:splunk:splunk:10.4.0
  • Splunk » Splunk » Version: 10.4.1
    cpe:2.3:a:splunk:splunk:10.4.1
  • Splunk » Splunk » Version: 10.4.2
    cpe:2.3:a:splunk:splunk:10.4.2
  • Splunk » Splunk » Version: 10.4.3
    cpe:2.3:a:splunk:splunk:10.4.3
  • Splunk » Splunk » Version: 9.4.0
    cpe:2.3:a:splunk:splunk:9.4.0
  • Splunk » Splunk » Version: 9.4.1
    cpe:2.3:a:splunk:splunk:9.4.1
  • Splunk » Splunk » Version: 9.4.10
    cpe:2.3:a:splunk:splunk:9.4.10
  • Splunk » Splunk » Version: 9.4.11
    cpe:2.3:a:splunk:splunk:9.4.11
  • Splunk » Splunk » Version: 9.4.12
    cpe:2.3:a:splunk:splunk:9.4.12
  • Splunk » Splunk » Version: 9.4.13
    cpe:2.3:a:splunk:splunk:9.4.13
  • Splunk » Splunk » Version: 9.4.14
    cpe:2.3:a:splunk:splunk:9.4.14
  • Splunk » Splunk » Version: 9.4.15
    cpe:2.3:a:splunk:splunk:9.4.15
  • Splunk » Splunk » Version: 9.4.2
    cpe:2.3:a:splunk:splunk:9.4.2
  • Splunk » Splunk » Version: 9.4.3
    cpe:2.3:a:splunk:splunk:9.4.3
  • Splunk » Splunk » Version: 9.4.4
    cpe:2.3:a:splunk:splunk:9.4.4
  • Splunk » Splunk » Version: 9.4.5
    cpe:2.3:a:splunk:splunk:9.4.5
  • Splunk » Splunk » Version: 9.4.6
    cpe:2.3:a:splunk:splunk:9.4.6
  • Splunk » Splunk » Version: 9.4.7
    cpe:2.3:a:splunk:splunk:9.4.7
  • Splunk » Splunk » Version: 9.4.8
    cpe:2.3:a:splunk:splunk:9.4.8
  • Splunk » Splunk » Version: 9.4.9
    cpe:2.3:a:splunk:splunk:9.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved