{"uuid": "7d3e0ebb-684b-46f0-ba7c-3f994807c56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116751343889084181", "content": "\ud83d\udea8 ALERT - A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.\nThe exploit chain is now public.\nRead the full story: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-06-15T00:42:10.016254Z"}