Actively exploited vulnerabilities affecting Splunk products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-20253https://wildfortech.com/security#CVE-2026-20253This flaw in Splunk Enterprise allows an unauthenticated attacker to create or truncate arbitrary files by targeting an exposed PostgreSQL sidecar service endpoint — no login required. For organizations running Splunk, this means an outsider could corrupt, destroy, or overwrite critical data or configuration files, potentially disrupting security monitoring operations entirely. Because Splunk is commonly used as a central security and logging platform, compromising it can blind defenders at exactly the wrong moment.Thu, 18 Jun 2026 00:00:00 GMTSplunkEnterprise