CERT24Critical Splunk Enterprise Flaw Lets Attackers Run Code Without AuthenticationLoading data…
CERT24Threat Observatory
Period

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk released security updates for critical vulnerability CVE-2026-20253. The flaw allows an unauthenticated network-reachable user to perform arbitrary file operations and potentially achieve remote code execution. On June 18, 2026, Splunk reported limited exploitation, and CISA added the flaw to its Known Exploited Vulnerabilities catalog.

← Back to intelligence

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk released security updates for critical vulnerability CVE-2026-20253. The flaw allows an unauthenticated network-reachable user to perform arbitrary file operations and potentially achieve remote code execution. On June 18, 2026, Splunk reported limited exploitation, and CISA added the flaw to its Known Exploited Vulnerabilities catalog.