VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Feb 18, 2026· Updated Jun 17, 2026

CVE-2026-20144

CVE-2026-20144

Description

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.8, and 9.2.11, and Splunk Cloud Platform versions below 10.2.2510.0, 10.1.2507.11, 10.0.2503.9, and 9.3.2411.120, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the the Splunk _internal index could view the Security Assertion Markup Language (SAML) configurations for Attribute query requests (AQRs) or Authentication extensions in plain text within the conf.log file, depending on which feature is configured.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=9.2.0,<9.2.11
  • Splunk/Splunk Cloud Platform3 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.3.2411,<9.3.2411.120
    • (no CPE)range: <10.2.2510.0, <10.1.2507.11, <10.0.2503.9, <9.3.2411.120
    • (no CPE)range: 10.1.2507
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <10.2.0, <10.0.2, <9.4.7, <9.3.8, <9.2.11+ 1 more
    • (no CPE)range: <10.2.0, <10.0.2, <9.4.7, <9.3.8, <9.2.11
    • (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.