A vulnerability classified as critical was found in Splunk Enterprise and Cloud Platform. This vulnerability affects unknown code of the component Ownership Reassignment Endpoint. The manipulation results in improper access controls. This vulnerability is known as CVE-2026-20259. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
| Vendor | Product | Versions |
|---|---|---|
| splunk | splunk enterpri | 10.2, 10.0, 10.3.2512, 10.2.2510, 10.1.2507, 10.0.2503, 9.3.2411 |
Updated severity to CRITICAL, changed exploit availability to false, and provided a new description with additional details.
Initial creation
