CVE-2026-20143Patch

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

Back to dashboard

0.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-02-19); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-19	1	Patch1
2026-02-20	1	Disclosure1

Full discourse2 posts

Gray Hats@the_yellow_fall231d
Patch
Splunk Enterprise Windows flaws (CVSS 7.7) CVE-2026-20143 & CVE-2026-20140 allow system takeover via DLL and Python search path hijacking. Patch immediately. #Splunk #CyberSecurity #InfoSec #WindowsSecurity #DLLHijacking #LPE #PatchNow https://securityonline.info/splunk-windows-flaws-expose-servers-to-system-takeover/
Post summary
Splunk Enterprise on Windows is affected by CVE-2026-20140 and CVE-2026-20143, which enable system takeover through DLL and Python search path hijacking; immediate patching is advised.
00023309
10.3K followersView on X
CERT-PY@CERTpy230d
Disclosure
⚠️ Vulnerabilidades en productos Splunk ❗ CVE-2026-20143 ❗ CVE-2026-20140 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-splunk-3/ https://t.co/4M8UQYUHbi
Post summary
The tweet announces two Splunk CVEs and provides links for further information, but contains no details on exploits, patches, or technical specifics.
01010157
6.6K followersView on X

Explore more

Back to dashboard