Splunk Enterprise and Cloud Platform Exposed to Dangerous RCE Vulnerability

Gbhackers •Divya • April 16, 2026

Splunk has disclosed a high-severity vulnerability affecting both its Enterprise and Cloud Platform environments. Tracked as CVE-2026-20204, this flaw allows attackers to execute arbitrary code remotely. With a CVSS score of 7.1, the vulnerability requires immediate attention from system administrators and security threat hunters. Vulnerability Details The security defect stems from the improper handling and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Splunk Vulnerability CVE-2026-20204 Enables Remote Code Execution Splunk has disclosed a high-severity vulnerability, CVE-2026-20204, affecting both its Enterprise and Cloud Platform environments. This flaw allows attackers to execute arbitrary code remotely, posing a significant threat to organizational networks. The vulnerability has a CVSS score of 7.1, indicating it requires immediate attention from system administrators. The issue arises from improper handling within the software, which could be exploited by malicious actors. Organizations using affected versions of Splunk's platforms are urged to assess their systems and apply necessary mitigations. The vulnerability was reported by Splunk researcher Gabriel Nitu. As of now, no active exploitation has been confirmed, but the potential for attacks remains high. Security teams are advised to monitor for any signs of exploitation attempts. 2 sources 66

Extracted Entities

CVEs (1)

CVE-2026-20204