MSRXMSRXSecurity
Vendors / Splunk

Splunk vulnerabilities being exploited

1 Splunk flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Enterprise. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-06-18CVE-2026-20253 Enterprise
Splunk Enterprise Missing Authentication for Critical Function Vulnerability

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

2026-06-21
Watch my Splunk softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.