Splunk vulnerabilities

1 CVE tracked

In our reporting, Splunk appears in the context of its presence at Black Hat USA 2026 with Cisco Talos, but the primary focus is on a critical security issue. The most significant event is the disclosure of CVE-2026-20253, a critical unauthenticated Remote Code Execution vulnerability in Splunk Enterprise with a CVSS score of 9.8, stemming from missing authentication on a PostgreSQL sidecar service. Defenders should prioritize patching this vulnerability immediately and ensure the affected service is not exposed to untrusted networks.

Azərbaycanca: Hesabatlarımızda Splunk, xüsusilə 'Cisco Talos at Black Hat USA 2026' tədbirində iştirakı ilə diqqət çəkir. Ən kritik məqam 9.8 CVSS balı ilə qeyd olunan CVE-2026-20253 zəifliyidir ki, bu, Splunk Enterprise məhsulunda autentifikasiyasız uzaqdan kod icrasına (Unauthenticated RCE) səbəb olur. Bu zəiflik PostgreSQL sidecar servisindəki çatışmazlıqdan qaynaqlanır. Müdafiəçilər dərhal Splunk Enterprise qurğularını son versiyaya yeniləməli və bu xidmətə şəbəkə girişini məhdudlaşdırmalıdırlar.

This hub is built from skopnix's own reporting on Splunk: the overview is AI-written from that coverage and every CVE links to its grounded explainer. KEV status comes from CISA's Known Exploited Vulnerabilities catalog and EPSS from FIRST — vendor, version and score details are never invented.