CVE-2026-20253

Splunk Enterprise Critical Authentication Bypass Flaw Exploited in Active Corporate Infiltration Attacks

CISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.