CVE-2026-20253 1

CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jun 18, 2026

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

Vulnerabilities & Patching