CISA has issued an urgent alert regarding a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, which is now listed in the Known Exploited Vulnerabilities (KEV) catalog following evidence of active exploitation. The flaw, categorized under CWE-306 (Missing Authentication for Critical Function), exposes affected systems to unauthorized file manipulation through a PostgreSQL sidecar service endpoint, […] The post CISA Issues Alert on Critical Splunk Enterprise Bug Under Active Exploitation appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
First seen on gbhackers.com
Jump to article: gbhackers.com/cisa-issues-alert-on-critical-splunk-enterprise-bug/
