Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Splunk · Enterprise
Date added (CISA)
2026-06-18
Remediation due
2026-06-21
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.