THREAT ADVISORY Splunk Enterprise Remote Code Execution September 2, 2026

DOWNLOAD PDF Severity: Critical (CVSS 9.8) CVE: CVE-2026-20253 Affected Product: Splunk Enterprise 10.x Status: Patch Immediately Executive Summary Splunk released emergency security updates for a critical vulnerability, CVE-2026-20253 , affecting certain versions of Splunk Enterprise. The flaw exists within a PostgreSQL sidecar service used by Splunk Enterprise and allows a remote, unauthenticated attacker to create or truncate arbitrary files on the target system.…