{"timestamp":"2026-06-10T18:22:19.768336Z","id":"CVE-2026-20258","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Splunk","product":"Splunk Enterprise","versions":[{"version":"10.2","lessThan":"10.2.4","versionType":"custom","status":"affected"},{"version":"10.0","lessThan":"10.0.7","versionType":"custom","status":"affected"},{"version":"9.4","lessThan":"9.4.12","versionType":"custom","status":"affected"},{"version":"9.3","lessThan":"9.3.13","versionType":"custom","status":"affected"}]},{"vendor":"Splunk","product":"Splunk Cloud Platform","versions":[{"version":"10.3.2512","lessThan":"10.3.2512.11","versionType":"custom","status":"affected"},{"version":"10.2.2510","lessThan":"10.2.2510.15","versionType":"custom","status":"affected"},{"version":"10.1.2507","lessThan":"10.1.2507.23","versionType":"custom","status":"affected"},{"version":"9.3.2411","lessThan":"9.3.2411.132","versionType":"custom","status":"affected"}]}]

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

OR
          *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 10.0.0 up to (excluding) 10.0.7
          *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 10.2.0 up to (excluding) 10.2.4
          *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.3.0 up to (excluding) 9.3.13
          *cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:* versions from (including) 9.4.0 up to (excluding) 9.4.12

OR
          *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 9.3.2411 up to (excluding) 9.3.2411.132
          *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 10.1.2507 up to (excluding) 10.1.2507.23
          *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 10.2.2510 up to (excluding) 10.2.2510.15
          *cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:* versions from (including) 10.3.2512 up to (excluding) 10.3.2512.11

Cisco Systems, Inc.: https://advisory.splunk.com/advisories/SVD-2026-0608 Types: Vendor Advisory

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could store a malicious script in a classic dashboard HTML panel, causing unauthorized JavaScript code to execute in the browser of another user.  

The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The low-privileged user should not be able to exploit the vulnerability at will.

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-79

https://advisory.splunk.com/advisories/SVD-2026-0608