Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)
CVEs:
CVE-2026-20253
Indicators of Compromise
1013 articles containing extracted IOCs (CVEs, IPs, hashes, domains, URLs, emails)
U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday
CVEs:
CVE-2026-20253
CISA Issues Alert on Critical Splunk Enterprise Bug Under Active Exploitation
CVEs:
CVE-2026-20253
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
CVEs:
CVE-2025-20701
Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure
CVEs:
CVE-2026-20253
Apple releases security update for Beats Studio Buds vulnerability
CVEs:
CVE-2025-20701
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
CVEs:
CVE-2026-42530
Cisco fixed a critical ISE vulnerability that lets attackers to gain root access
CVEs:
CVE-2026-20181
Cisco fixed a critical ISE vulnerability that lets attackers to gain root access
CVEs:
CVE-2026-20181
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
CVEs:
CVE-2026-42530
CVE-2026-42055
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
CVEs:
CVE-2026-50034
CVE-2026-52866
CISA Adds One Known Exploited Vulnerability to Catalog
CVEs:
CVE-2026-20253
Schneider Electric EasyLogic T150 and Saitel DP
CVEs:
CVE-2026-6865
AVer PTC cameras
CVEs:
CVE-2026-40624
Rockwell Automation FactoryTalk Historian Site Edition
CVEs:
CVE-2025-13036
CVE-2025-44019
CVE-2025-36539
AzeoTech DAQFactory
CVEs:
CVE-2026-12390
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products
Domains:
www.se.com
Hackers Exploit WordPress SMTP Plugin With 100,000+ Installs to Steal Sensitive Data
CVEs:
CVE-2026-4020
Splunk AI Toolkit Vulnerability Allows Arbitrary OS Command Execution
CVEs:
CVE-2026-20266
Microsoft Confirms RoguePlanet Zero-Day Exploit Targeting Defender
CVEs:
CVE-2026-50656