Back Cybersecuritynews

Splunk RCE Vulnerability Allows Attackers to Execute Arbitrary Shell Commands

Cybersecuritynews •Abinaya • March 12, 2026

A critical security advisory has been released, warning users of a high-severity vulnerability affecting both Enterprise and Cloud platforms. Tracked as CVE-2026-20163, this flaw carries a CVSS score of 8.0. It enables attackers to perform Remote Command Execution (RCE) on targeted systems. The vulnerability stems from improper handling of user inputs when the system previews […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Splunk RCE Vulnerability Exposes Systems to Remote Command Execution A critical security advisory has been issued regarding a high-severity vulnerability in Splunk, tracked as CVE-2026-20163, published on 2026-03-11. This flaw affects both Splunk Enterprise and Cloud platforms, allowing attackers to execute arbitrary shell commands remotely. The vulnerability arises from improper handling of user inputs during system previews, with a CVSS score of 8.0 indicating its severity. Organizations using these platforms are at risk, as the flaw can lead to unauthorized access and control over affected systems. Users are advised to take immediate action to mitigate potential threats. The vulnerability is currently unpatched, increasing the urgency for organizations to assess their exposure. Security teams should prioritize this issue to prevent exploitation. 3 sources 71

Extracted Entities

Splunk RCE Vulnerability Allows Attackers to Execute Arbitrary Shell Commands

The full story

Extracted Entities

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)