Critical Splunk Enterprise Pre

Gbhackers •Eswar • June 13, 2026

A critical pre-authentication remote code execution (RCE) vulnerability in Splunk Enterprise has been disclosed, carrying a near-perfect CVSS score of 9.8. Tracked as CVE-2026-20253, the flaw was published by Splunk on June 10, 2026, and affects the PostgreSQL Sidecar Service introduced in Splunk version 10. The root cause of CVE-2026-20253 lies in the PostgreSQL Sidecar Service’s HTTP API […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Splunk Enterprise Expose Systems to Attacks Multiple high and critical vulnerabilities have been identified in Splunk Enterprise, allowing attackers to execute malicious scripts and exfiltrate sensitive data. The most severe vulnerability, CVE-2026-20253, has a CVSS score of 9.8 and affects versions below 10.2.4. Security advisories released on June 10, 2026, detail the potential for unauthorized file operations and sensitive information disclosure. Organizations using affected versions are at significant risk and are advised to apply vendor-released patches immediately. The vulnerabilities could lead to serious breaches if exploited, emphasizing the urgency for remediation. 26 sources 73

Extracted Entities

Critical Splunk Enterprise Pre

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)