EUVD-2026-36084

🗓️ 10 Jun 2026 17:16:02Reported by EUVDType

Splunk vulnerability in listed versions lets users with edit saved search permission reassign ownership to unauthorized users; endpoint lacks access control.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2026-20259	11 Jun 202618:00	–	circl
CNNVD	Splunk Enterprise 权限许可和访问控制问题漏洞	10 Jun 202600:00	–	cnnvd
CVE	CVE-2026-20259	10 Jun 202617:16	–	cve
Cvelist	CVE-2026-20259 Improper Access Control in Splunk Enterprise	10 Jun 202617:16	–	cvelist
NCSC	Vulnerabilities in Splunk Enterprise and Splunk Cloud Platform	19 Jun 202612:42	–	ncsc
NVD	CVE-2026-20259	10 Jun 202618:16	–	nvd
Positive Technologies	PT-2026-48499	10 Jun 202600:00	–	ptsecurity
Tenable Nessus	Splunk Enterprise 10.0.0 < 10.0.7, 10.2.0 < 10.2.4 (SVD-2026-0609)	10 Jun 202600:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "4e88603b-a133-36cc-98d7-b2bb2f69e67e",
        "vendor": {
          "name": "Splunk"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "29107d92-811f-3d8c-8b07-108a37d5edde",
        "product": {
          "name": "Splunk Enterprise",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.0 <10.0.7"
      },
      {
        "id": "2e6f0982-3426-3f42-b641-1af1604425ba",
        "product": {
          "name": "Splunk Cloud Platform",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.3.2512 <10.3.2512.12"
      },
      {
        "id": "597b3f06-06cd-3ab8-be76-60b7d96695f3",
        "product": {
          "name": "Splunk Cloud Platform",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.0.2503 <10.0.2503.14"
      },
      {
        "id": "85447df5-f3ed-36ca-a4ca-cf8da47567a6",
        "product": {
          "name": "Splunk Cloud Platform",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.2.2510 <10.2.2510.15"
      },
      {
        "id": "88697bb5-848d-309d-a869-c5649aa8586b",
        "product": {
          "name": "Splunk Cloud Platform",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "9.3.2411 <9.3.2411.131"
      },
      {
        "id": "a44dc8f9-8f74-3fe2-9dd8-4ed89dca2418",
        "product": {
          "name": "Splunk Cloud Platform",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.1.2507 <10.1.2507.23"
      },
      {
        "id": "f58a0a45-49af-3c87-ba9c-66ccca5ce609",
        "product": {
          "name": "Splunk Enterprise",
          "vendor": {
            "name": "Splunk"
          }
        },
        "product_version": "10.2 <10.2.4"
      }
    ]
  }
]

Source	Link
advisory	www.advisory.splunk.com/advisories/SVD-2026-0609

10 Jun 2026 18:24Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.5

EPSS0.00189