VYPR
← All advisories
High severity7.1NVD Advisory· Published Jun 10, 2026· Updated Jun 15, 2026

CVE-2026-20258

CVE-2026-20258

Description

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could store a malicious script in a classic dashboard HTML panel, causing unauthorized JavaScript code to execute in the browser of another user.

The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The low-privileged user should not be able to exploit the vulnerability at will.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Splunk/Splunk Cloud Platform2 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.3.2411,<9.3.2411.132
    • (no CPE)range: <9.3.2411.132, <10.1.2507.23, <10.2.2510.15, <10.3.2512.11
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=9.3.0,<9.3.13
  • Splunk/Splunk Enterprisellm-fuzzy
    Range: <9.3.13, <9.4.12, <10.0.7, <10.2.4

Patches

Vulnerability mechanics

References

1

News mentions

2