Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Summary

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. "In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user could create or truncate arbitrary

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.