A serious flaw in Splunk Enterprise for Windows that lets low-privileged users hijack DLL loading and escalate to SYSTEM-level access. Tracked as CVE-2026-20140, this local privilege escalation (LPE) vulnerability stems from DLL search-order hijacking and carries a CVSSv3.1 score of 7.7 (High). Splunk disclosed it on February 18, 2026, via advisory SVD-2026-0205. The issue affects […]

The post Splunk Enterprise for Windows Flaw Enables DLL Hijacking, SYSTEM Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.