CVE-2026-20142 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-20142 PUBLISHED CVSS 6.800000190734863 MEDIUM

In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk `_internal` index could view the RSA `accessKey` value from the [<u>Authentication.conf</u> ](https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.2/configuration-file-reference/10.2.0-configuration-file-reference/authentication.conf)file, in plain text.

EPSS 0.06% · 19.1th percentile

Risk Scores

CVSS v3.1

6.800000190734863

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.06%

19.1th percentile

Affected Products

Vendor	Product	Versions
splunk	splunk	10.0.0, 9.2.0, 9.3.0
Splunk	Splunk Enterprise	10.0, 9.4, 9.3

Timeline

Oct 8, 2025 CVE ID Reserved
Feb 18, 2026 CVE Published
Feb 19, 2026 EPSS Score
Feb 20, 2026 EPSS Score
Feb 21, 2026 EPSS Score
Feb 23, 2026 EPSS Score
Feb 24, 2026 EPSS Score
Feb 25, 2026 EPSS Score
Feb 26, 2026 EPSS Score
Feb 26, 2026 CVE Updated
Feb 27, 2026 EPSS Score
Feb 28, 2026 EPSS Score

References

https://advisory.splunk.com/advisories/SVD-2026-0210 advisory
https://advisory.splunk.com/advisories/SVD-2026-0206 advisory
https://advisory.splunk.com/advisories/SVD-2026-0204 advisory
https://advisory.splunk.com/advisories/SVD-2026-0211 advisory
https://advisory.splunk.com/advisories/SVD-2026-0202 advisory
https://advisory.splunk.com/advisories/SVD-2026-0205 advisory
https://advisory.splunk.com/advisories/SVD-2026-0203 advisory
https://advisory.splunk.com/advisories/SVD-2026-0207 advisory
https://advisory.splunk.com/advisories/SVD-2026-0209 advisory
https://advisory.splunk.com/advisories/SVD-2026-0208 advisory
https://advisory.splunk.com/advisories/SVD-2026-0212 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-20142 advisory

Open in Interactive Console →