CVE-2026-20239
Sensitive Information Disclosure through Log Files in Splunk Enterprise
Severity
High 7.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
39.2th percentile
Discovered by
Not disclosed
Published
May 20, 2026
Assigned by cisco
Description
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|
No product mapping yet — this CVE is pending taxonomy review.
Vendor-reported affected versions (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
Credit
Charlie Huggard, Splunk