Client-side Denial-of-Service Vulnerability in Splunk Enterprise and Cloud Platform
CVE-2026-20139

4.3MEDIUM

Key Information:

Vendor

Splunk
Status
Splunk Enterprise
Splunk Cloud Platform
Vendor
CVE Published:
18 February 2026

What is CVE-2026-20139?

In specific versions of Splunk Enterprise and Splunk Cloud Platform, a vulnerability exists allowing low-privileged users to inject potentially malicious payloads into API parameters. This could result in significant performance issues, including slow page load times or temporary unresponsiveness in Splunk Web, affecting the user experience and overall system performance.

Affected Version(s)

Splunk Cloud Platform 10.2.2510 < 10.2.2510.3

Splunk Cloud Platform 10.1.2507 < 10.1.2507.8

Splunk Cloud Platform 10.0.2503 < 10.0.2503.9

References

https://advisory.splunk.com/advisories/SVD-2026-0204

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

STĂ–K / Fredrik Alexandersson
.