CISA Warns of Actively Exploited Splunk Enterprise Critical Function Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Splunk Enterprise vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning federal agencies and organizations of active exploitation in the wild. Tracked as CVE-2026-20253 , the flaw involves a missing authentication mechanism for a critical function and poses a significant risk to enterprise environments relying on Splunk for security information and event management…