Vulnerability · Published May 20, 2026 · Assigned by cisco
CVE-2026-20239Sensitive Information Disclosure through Log Files in Splunk Enterprise
High 7.5
In plain English
A high-severity sensitive data in logs in Splunk Cloud Platform from Splunk. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 58.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk Enterprise | 10.2 – before 10.2.210.0 – before 10.0.5 |
| Splunk | Splunk Cloud Platform | 10.3.2512 – before 10.3.2512.810.2.2510 – before 10.2.2510.1110.1.2507 – before 10.1.2507.2110.0.2503 – before 10.0.2503.13 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H