Multiple Splunk Enterprise Vulnerabilities Allow Attackers to Execute Malicious Script

Cybersecuritynews •Abinaya • June 11, 2026

Multiple high and critical vulnerabilities in Splunk Enterprise could allow attackers to execute malicious scripts, exfiltrate sensitive data, and perform unauthorized file operations, according to a series of security advisories released on June 10, 2026. The most severe flaw, tracked as CVE-2026-20253, carries a CVSS score of 9.8 and affects Splunk Enterprise versions below 10.2.4 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Splunk Enterprise Expose Systems to Attacks Multiple high and critical vulnerabilities have been identified in Splunk Enterprise, allowing attackers to execute malicious scripts and exfiltrate sensitive data. The most severe vulnerability, CVE-2026-20253, has a CVSS score of 9.8 and affects versions below 10.2.4. Security advisories released on June 10, 2026, detail the potential for unauthorized file operations and sensitive information disclosure. Organizations using affected versions are at significant risk and are advised to apply vendor-released patches immediately. The vulnerabilities could lead to serious breaches if exploited, emphasizing the urgency for remediation. 26 sources 73

Extracted Entities

Multiple Splunk Enterprise Vulnerabilities Allow Attackers to Execute Malicious Script

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (1)

Platforms (1)