Splunk

GBHackers CVE Splunk Jun 29

Splunk Secure Gateway RCE Vulnerability Lets Low-Privileged Attackers Execute Arbitrary Code

A newly disclosed high-severity vulnerability in Splunk Secure Gateway (SSG) allows low-privileged authenticated users to achieve remote code execution (RCE)...

T1190 1 IOC

GBHackers →

Help Net Security CVE Splunk Jun 19

Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)

CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and order...

1 IOC

Help Net Security →

BleepingComputer Vulnerability Disclosure Splunk Jun 19

CISA: Splunk Enterprise flaw actively exploited, patch by Sunday

CISA has urged U.S.

BleepingComputer →

Security Affairs CVE Splunk Jun 19

U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday

U.S.

1 IOC

Security Affairs →

GBHackers CVE Splunk Jun 19

CISA Issues Alert on Critical Splunk Enterprise Bug Under Active Exploitation

CISA has issued an urgent alert regarding a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, which is now listed in the Known Exploite...

1 IOC

GBHackers →

SecurityWeek CVE Splunk Jun 19

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution. The post Splunk En...

T1190 1 IOC

SecurityWeek →

CISA Advisories CVE Splunk Jun 18

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-20253 Splunk En...

1 IOC

CISA Advisories →

GBHackers CVE Splunk Jun 18

Splunk AI Toolkit Vulnerability Allows Arbitrary OS Command Execution

Splunk has disclosed a critical security vulnerability in its AI Toolkit that could allow authenticated administrators to execute arbitrary operating system ...

1 IOC

GBHackers →

The Hacker News CVE Splunk Jun 13

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operati...

T1190 1 IOC

The Hacker News →

GBHackers CVE Splunk Jun 13

Critical Splunk Enterprise Pre-Auth RCE Chain Exposes Databases

A critical pre-authentication remote code execution (RCE) vulnerability in Splunk Enterprise has been disclosed, carrying a near-perfect CVSS score of 9.8.

T1190 1 IOC

GBHackers →

Help Net Security General Splunk May 22

Downtime has become a $600 billion business problem

The average cost of downtime has reached $600 billion for the Global 2000, a 50% increase in two years. According to Splunk’s The Hidden Costs of Downtime re...

T1598

Help Net Security →