A critical pre-authentication remote code execution (RCE) vulnerability in Splunk Enterprise has been disclosed, carrying a near-perfect CVSS score of 9.8. Tracked as CVE-2026-20253, the flaw was published by Splunk on June 10, 2026, and affects the PostgreSQL Sidecar Service introduced in Splunk version 10. The root cause of CVE-2026-20253 lies in the PostgreSQL Sidecar Service’s HTTP API […]

The post Critical Splunk Enterprise Pre-Auth RCE Chain Exposes Databases appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Eswar

Source: gbHackers
Source Link: https://gbhackers.com/critical-splunk-enterprise-pre-auth/