CVE-2026-20239

⚠️ high

Summary

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.

CVSS Score

7.5

High

EPSS Score

0.5

Exploit Probability

Published Date

2026-05-20

First Seen: 2026-05-21

📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.7% of all 338,292 vulnerabilities in our database.

#105,741

Above average severity

Severity Percentile

🎯 CISA SSVC Assessment Updated: May 20, 2026

🔍 Exploitation Status

None

No known exploits

⚙️ Automatable

Requires human interaction

💥 Technical Impact

Total

Complete system compromise possible

🏆 Discovered By

Charlie Huggard, Splunk

SSVC data provided by CISA

Last Modified 2026-07-23

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE IDs (Weakness Types)

CWE-532

📦 Affected Products 6

Vendor	Product	Status	Affected Versions
splunk	splunk	Affected	> 10.0.0 < 10.0.5
splunk	splunk	Affected	> 10.2.0 < 10.2.2
splunk	splunk_cloud_platform	Affected	> 10.0.2503 < 10.0.2503.13
splunk	splunk_cloud_platform	Affected	> 10.1.2507 < 10.1.2507.21
splunk	splunk_cloud_platform	Affected	> 10.2.2510 < 10.2.2510.11
splunk	splunk_cloud_platform	Affected	> 10.3.2512 < 10.3.2512.8

🔗 References 1

https://advisory.splunk.com/advisories/SVD-2026-0503

Vendor Advisory

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-20296	⚠️ high	8.3	0.2	In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26...	2026-07-15
CVE-2026-20297	⚠️ high	7.2	0.5	In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below...	2026-07-15
CVE-2026-20298	🔶 medium	5.3	0.2	In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26...	2026-07-15
CVE-2026-20251	⚠️ high	8.8	0.6	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.1...	2026-06-10
CVE-2026-20252	⚠️ high	7.6	0.3	In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.26...	2026-06-10
CVE-2026-20253	⛔ critical	9.8	96.2	In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or tr...	2026-06-10

These CVEs affect the same products