CISA Warns of Splunk Enterprise Critical Function Vulnerability Actively Exploited in Attacks

CISA warns of CVE-2026-20253, a critical unauthenticated vulnerability in Splunk Enterprise’s PostgreSQL sidecar endpoint that allows attackers to create or truncate arbitrary files; the flaw is actively exploited in the wild, added to CISA’s KEV catalog, and federal remediation was mandated under BOD 26-04, making immediate patching and exposure assessment essential.