CVE-2026-20253

Vendor

Splunk

Product

Enterprise

CVSS

9.8

CISA KEV

listed

Exposure class

Database, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 50
   KEV CISA KEV 18 Jun 2026

   Splunk Enterprise Missing Authentication for Critical Function Vulnerability

   Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

   KEV Fix available CVE-2026-20253 Splunk
2. 64
   Research ThreatLabz 26 Jun 2026

   Critical Unauthenticated Remote Code Execution in Splunk Enterprise (CVE-2026-20253)

   IntroductionSplunk disclosed a critical unauthenticated remote code execution (RCE) vulnerability in Splunk Enterprise tracked as CVE-2026-20253 on June 10, 2026. The vulnerability has a CVSS score of 9.8 and stems from missing…

   Exploited CVSS 9.8 CVE-2026-20253 Splunk
3. 21
   watchTowr Labs watchTowr 12 Jun 2026

   Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)

   Three posts? In three days? Are we insane? We're home alone, there's no one to stop us, and we're up past bedtime. So, we need to talk about Splunk. On June 10th, Splunk published this CVE-2026-20253 advisory : It has everything…

   CVE-2026-20253 Splunk