Medium severity4.3NVD Advisory· Published Apr 15, 2026· Updated Apr 17, 2026
CVE-2026-20203
CVE-2026-20203
Description
In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, and 9.3.2411.127, a low-privileged user that does not hold the admin or power Splunk roles, has write permission on the app, and does not hold the high-privilege capability accelerate_datamodel, could turn on or off Data Model Acceleration due to improper access control.
Affected products
2- cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*Range: >=9.3.2411,<9.3.2411.127
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- advisory.splunk.com/advisories/SVD-2026-0402nvdVendor Advisory
News mentions
2- Singapore boffins get diverse SIEMs singing in harmony with agentic rule translationThe Register Security · May 5, 2026
- 20th April – Threat Intelligence ReportCheck Point Research · Apr 20, 2026