CVE-2026-20239
Sensitive Information Disclosure through Log Files in Splunk Enterprise
Severity
High 7.5
CVSS 3.1
Exploited
Not listed
EPSS
0.005
40.9th percentile
Discovered by
Not disclosed
Published
May 20, 2026
Assigned by cisco
Description
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | cna-assigner |
| Cisco | Splunk Enterprise | SIEM & Log Management | cna-assigner |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud Platform
Credit
Charlie Huggard, Splunk