CVE-2026-20240 – Splunk Enterprise
CVSS 6.5
MODERATE
“Security monitoring loses value when sensitive data and malformed input can disrupt trust in the platform.”
Splunk released patches for two high-severity vulnerabilities affecting Splunk Enterprise. CVE-2026-20240 has a CVSS score of 7.1, which is High severity. CVE-2026-20239 has a CVSS score of 7.5, which is High severity.
The update addresses improper input validation and sensitive information exposure issues. These vulnerabilities could allow attackers to manipulate application behavior or expose confidential information through logs and diagnostic data. The fixes strengthen input validation controls and improve protection of sensitive operational information.
Key Details
- Affected Product
- Splunk Splunk
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-20
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.