Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-13 13:23 UTC
  • Importiert: 2026-06-22 12:20 UTC
  • CVSS: 9.8
  • Quelle-ID: thn_global
  • uid_hash: 7cd560a5bad975e854bce01a1998cc29e4d60077193536b909ee17d633d3666e

Inhalt

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution.

The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system.

"In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user could create or truncate arbitrary

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-20253

CRITICAL

9.8

CRITICAL

9.8

2026-06-10

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews