CISA: Splunk Enterprise flaw actively exploited, patch by Sunday (opens in new tab)

Covers 2 stories including Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)

CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. [...]

Read the original article