Input Validation Issue in Splunk Enterprise and Cloud Platform by Splunk

CVE-2026-20202

What is CVE-2026-20202?

In certain versions of Splunk Enterprise and Splunk Cloud Platform, a vulnerability exists that allows a user with high-privilege capabilities to create a username that improperly handles null byte characters or non-UTF-8 percent-encoded bytes. This flaw arises from inadequate input validation, leading to potential issues in username storage and user account management, such as preventing affected users from being edited or deleted effectively. Organizations using these affected versions should take immediate steps to mitigate this risk by applying the necessary updates and monitoring their systems for unusual account activities.

References