CVE-2026-20253 CRITICAL

Splunk Enterprise Vulnerability
Generated: 10 Oct 2026 19:57 • CVE Threat Intelligence

Description

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

9.8
CVSS CRITICAL

Details

Published
18 Jun 2026 00:00
Modified
N/A
Source
CIRCL
Vendor
Splunk
Product
Enterprise
Fix Version
Vendor Patch / Mitigation Available