Splunk CVE-2026-20253: CVSS 9.8 RCE Exploited in the Wild

This advisory details CVE-2026-20253 — a critical (CVSS 9.8) pre-authenticated RCE in the Splunk Enterprise PostgreSQL sidecar service that has been confirmed as actively exploited; affected Splunk Enterprise versions below 10.2.4 and 10.0.7 (and corresponding cloud versions) should be updated immediately or the sidecar disabled as a temporary workaround, with official patches 10.2.4 and 10.0.7 provided as the permanent fix.