VulnSocial

CVE-2026-20144Disclosure(splunk / splunk)

LOWCVSS 4.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the the Splunk _internal index could view the Security Assertion Markup Language (SAML) configurations for Attribute query requests (AQRs) or Authentication extensions in plain text within the conf.log file, depending on which feature is configured.

splunk CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • splunk
  • splunk_cloud_platform

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
splunk
Products
splunksplunk_cloud_platform

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-24: 202-24
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20144 In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3… https://www.cve.org/CVERecord?id=CVE-2026-20144 ----- Traducción: CVE-2026-20144 En … http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑20144, lists affected Splunk Enterprise and Cloud Platform versions, and links to the CVE record, but provides no further technical details or mitigation information.

    0000050
    53 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20144 In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3… https://www.cve.org/CVERecord?id=CVE-2026-20144

    Post summary

    The text lists affected Splunk Enterprise and Cloud Platform versions for CVE-2026-20144 but provides no further details on the vulnerability, exploitation, or mitigation.

    00000373
    56.5K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appsplunksplunk---
Appsplunksplunk_cloud_platform---

Explore more

Back to dashboardsplunk CVEssplunk vulnerabilities