CVE-2026-20296

🗓️ 15 Jul 2026 17:18:23Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 57 Views

Cross site request forgery bypass in Splunk Deployment Server lets searches run as system user via get.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-20296	15 Jul 202617:18	–	attackerkb
Circl	CVE-2026-20296	15 Jul 202619:10	–	circl
Cvelist	CVE-2026-20296 SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise	15 Jul 202617:18	–	cvelist
EUVD	EUVD-2026-44737	15 Jul 202617:18	–	euvd
NCSC	Vulnerabilities in Splunk Enterprise and Splunk Cloud Platform	17 Jul 202614:27	–	ncsc
NVD	CVE-2026-20296	15 Jul 202618:16	–	nvd
Positive Technologies	PT-2026-60233	15 Jul 202600:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 9.4.0 < 9.4.13, 10.0.0 < 10.0.8, 10.2.0 < 10.2.5, 10.4.0 < 10.4.1 (SVD-2026-0702)	15 Jul 202600:00	–	nessus
Vulnrichment	CVE-2026-20296 SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise	15 Jul 202617:18	–	vulnrichment

NVD

Node

splunk splunkRange9.4.0–9.4.13enterprise

splunk splunkRange10.0.0–10.0.8enterprise

splunk splunkRange10.2.0–10.2.5enterprise

splunk splunkMatch10.4.0enterprise

Node

splunk splunk_cloud_platformRange10.1.2507–10.1.2507.24

splunk splunk_cloud_platformRange10.2.2510–10.2.2510.18

splunk splunk_cloud_platformRange10.3.2512–10.3.2512.16

splunk splunk_cloud_platformRange10.4.2604–10.4.2604.7

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "10.4",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.4.1"
      },
      {
        "version": "10.2",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.2.5"
      },
      {
        "version": "10.0",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.0.8"
      },
      {
        "version": "9.4",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "9.4.13"
      }
    ]
  },
  {
    "product": "Splunk Cloud Platform",
    "vendor": "Splunk",
    "versions": [
      {
        "version": "10.5.2605",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.5.2605.0"
      },
      {
        "version": "10.4.2604",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.4.2604.7"
      },
      {
        "version": "10.3.2512",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.3.2512.16"
      },
      {
        "version": "10.2.2510",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.2.2510.18"
      },
      {
        "version": "10.1.2507",
        "status": "affected",
        "versionType": "custom",
        "lessThan": "10.1.2507.24"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2026-0702

24 Jul 2026 18:18Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.18.3

EPSS0.00229

SSVC

CWE-352