{"uuid": "de8c052b-5932-44d5-b18d-e289aedad996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-22T00:00:12.166666Z"}