Vulnerability Description
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk | >= 10.0.0, < 10.0.5 |
| Splunk | Splunk Cloud Platform | >= 10.0.2503, < 10.0.2503.13 |
Related Weaknesses (CWE)
References
- https://advisory.splunk.com/advisories/SVD-2026-0503Vendor Advisory
FAQ
What is CVE-2026-20239?
CVE-2026-20239 is a vulnerability with a CVSS score of 7.5 (HIGH). In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_i...
How severe is CVE-2026-20239?
CVE-2026-20239 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-20239?
Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk, Splunk Splunk Cloud Platform.