CVE-2026-20239

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.2.2 Splunk Enterprise versions prior to 10.0.5 Splunk Cloud Platform versions prior to 10.3.2512.8 Splunk Cloud Platform versions prior to 10.2.2510.11 Splunk Cloud Platform versions prior to 10.1.2507.21 Splunk Cloud Platform versions prior to 10.0.2503.13

Description A user assigned a role with access to the internal index can view session cookies and response bodies containing sensitive data.

Recommendations Update Splunk Enterprise to version 10.2.2 or later. Update Splunk Enterprise to version 10.0.5 or later. Update Splunk Cloud Platform to version 10.3.2512.8 or later. Update Splunk Cloud Platform to version 10.2.2510.11 or later. Update Splunk Cloud Platform to version 10.1.2507.21 or later. Update Splunk Cloud Platform to version 10.0.2503.13 or later. Restrict access to the internal index to minimize the risk of sensitive data exposure.