Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk has released security updates to address a critical flaw in Splunk Enterprise, allowing unauthenticated users to perform file operations and execute remote code. The vulnerability, CVE-2026-20253, has a CVSS score of 9.8 and affects versions below 10.2.4 and 10.0.7.