Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Enterprise 10.0.7, 10.2.4 Clear all filters
TI-2026-16444 CVE-2026-20253 · GHSA-xgm5-jh99-wc4v

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

Priority CRITICAL 100KEV

In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.96939 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 CWE-306
TI-2026-16450 CVE-2026-20259 · GHSA-jhf8-vwfv-vr95

Improper Access Control in Splunk Enterprise

Priority LOW 24

In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds a Splunk role that c…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00189 Published 2026-06-10 Fixed in 10.2.4, 10.0.7 +5 CWE-284