CERT24CISA confirms Splunk Enterprise flaw is actively exploitedLoading data…
CERT24Threat Observatory
Period

CISA confirms Splunk Enterprise flaw is actively exploited

CISA confirmed that the Splunk Enterprise vulnerability tracked as CVE-2026-20253 is being actively exploited in attacks. CISA ordered U.S. Federal Civilian Executive Branch agencies to patch their Splunk instances by Sunday.

← Back to intelligence

CISA confirms Splunk Enterprise flaw is actively exploited

CISA confirmed that the Splunk Enterprise vulnerability tracked as CVE-2026-20253 is being actively exploited in attacks. CISA ordered U.S. Federal Civilian Executive Branch agencies to patch their Splunk instances by Sunday.