Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13, and 9.3.2411.127, a user who holds a role that contains the high-privilege capability `edit_user`could create a specially crafted username that includes a null byte or a non-UTF-8 percent-encoded byte due to improper input validation.<br><br>This could lead to inconsistent conversion of usernames into a proper format for storage and account management inconsistencies, such as being unable to edit or delete affected users.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-16 | 1 | Disclouser1 |
| 2026-04-17 | 1 | Disclosure1 |
| 2026-05-04 | 1 | PoC1 |
Alhamdulliah ! Got CVE-2026-20202 assigned 🎯 Discovered an input validation issue in Splunk that could break user account management. https://www.cve.org/CVERecord?id=CVE-2026-20202 #CVE #infosec #bugbounty
Post summary
The post announces the assignment of CVE-2026-20202, noting an input validation flaw in Splunk that may disrupt user account management, but provides no PoC, exploit, or patch information.
🚨 #CVE-2026-20202 Exploit Exposed: How Bug Bounty Hunters Are Leveraging This Zero-Day - Full Technical Deep Dive + Video https://undercodetesting.com/cve-2026-20202-exploit-exposed-how-bug-bounty-hunters-are-leveraging-this-zero-day-full-technical-deep-dive-video/ Educational Purposes!
Post summary
The post promotes a video that deep‑dives into CVE‑2026‑20202, likely showcasing a proof‑of‑concept exploit, but it does not assert active exploitation, provide tooling, patches, or technical specifics.
CVE-2026-20202 In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20,… https://www.cve.org/CVERecord?id=CVE-2026-20202
Post summary
The text announces CVE-2026-20202 and lists vulnerable Splunk version ranges but lacks details on exploitation, patches, or technical characteristics.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | splunk | splunk | - | - | - |
| App | splunk | splunk_cloud_platform | - | - | - |