PT-2026-33065 · Splunk · Splunk Enterprise+1

Published 2026-04-15 · Updated 2026-04-16 · CVE-2026-20203

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.2.2 Splunk Enterprise versions prior to 10.0.5 Splunk Enterprise versions prior to 9.4.10 Splunk Enterprise versions prior to 9.3.11 Splunk Cloud Platform versions prior to 10.4.2603.0 Splunk Cloud Platform versions prior to 10.3.2512.6 Splunk Cloud Platform versions prior to 10.2.2510.10 Splunk Cloud Platform versions prior to 10.1.2507.19 Splunk Cloud Platform versions prior to 10.0.2503.13 Splunk Cloud Platform versions prior to 9.3.2411.127

Description Improper access control allows a low-privileged user to enable or disable Data Model Acceleration. This occurs when a user does not possess the admin or power roles and lacks the accelerate datamodel capability, but maintains write permission on the app.

Recommendations Update Splunk Enterprise to version 10.2.2, 10.0.5, 9.4.10, or 9.3.11 depending on the current installation branch. Update Splunk Cloud Platform to version 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19, 10.0.2503.13, or 9.3.2411.127 depending on the current installation branch.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-20203

Affected Products

Splunk Cloud Platform

Splunk Enterprise

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-20203 · Security Note
• https://advisory.splunk.com/advisories/SVD-2026-0402 · Vendor Advisory
• https://twitter.com/CVEnew/status/2044737974697341118 · Twitter Post