Skip to content
Threat Feed
Subscribe

Product

Splunk Enterprise (<= 9.4)

1 brief RSS
high advisory

CISA KEV: Splunk Enterprise Missing Authentication (CVE-2026-20253)

An unauthenticated attacker can exploit CVE-2026-20253, a missing authentication vulnerability in Splunk Enterprise's PostgreSQL sidecar service, to create or truncate arbitrary files, leading to denial of service or potentially further system compromise.

PoC Splunk Enterprise +2 splunk cve vulnerability missing-authentication file-manipulation denial-of-service cisa-kev
2r 2t 1c updated