Skip to content
Threat Feed
Subscribe

Product

Splunk Cloud Platform

4 briefs RSS
high advisory

Splunk Path Traversal Vulnerability Allows Arbitrary File Writes (CVE-2026-20297)

A path traversal vulnerability (CVE-2026-20297) in Splunk Enterprise and Splunk Cloud Platform allows an authenticated user with `edit_local_apps` and `install_apps` capabilities to write files outside the intended application directory during app installation, specifically into the `$SPLUNK_HOME/etc/` directory and its subdirectories, leading to configuration manipulation, persistence, or privilege escalation.

Splunk Enterprise +1 path-traversal vulnerability splunk rce persistence privilege-escalation
3t 1c
medium advisory

Splunk Releases Security Advisory Addressing Multiple Products

Splunk released security advisories on May 20, 2026, addressing vulnerabilities in Splunk User Behavior Analytics, AppDynamics Agents, Universal Forwarder, Enterprise, Cloud Platform, and AI Toolkit, prompting users to apply necessary updates.

Splunk User Behavior Analytics +12 vulnerability splunk
2r
medium advisory

Splunk Enterprise and Cloud Platform Information Disclosure Vulnerability (CVE-2026-20239)

Splunk Enterprise and Cloud Platform versions prior to 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13 are vulnerable to information disclosure (CVE-2026-20239), allowing users with access to the `_internal` index to view sensitive data.

Splunk Enterprise +1 information-disclosure splunk cloud
2r 2t 1c
critical advisory

Splunk Remote Code Execution Vulnerability (CVE-2026-20204)

A low-privileged user can achieve remote code execution in vulnerable Splunk Enterprise and Cloud Platform versions by uploading a malicious file to the `$SPLUNK_HOME/var/run/splunk/apptemp` directory.

Splunk Enterprise +1 splunk rce cve-2026-20204
2r 2t 1c