Dossier
CVE-2026-20253
Coverage of CVE-2026-20253 in the Nexus archive.
- Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk has released security updates to address a critical flaw in Splunk Enterprise, allowing unauthenticated users to perform file operations and execute remote code. The vulnerability, CVE-2026-20253, has a CVSS score of 9.8 and affects versions below 10.2.4 and 10.0.7.