Skip to content
OpenAdvisories
Critical 1 exploited CVE WID-SEC-2026-1877 9 CVEs

Splunk Enterprise: Mehrere Schwachstellen

Published Jun 10, 2026 · Updated Jun 18, 2026 · Revision 3 · de-DE

Vendor: Splunk Product: Enterprise Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

Product

Splunk Enterprise ermöglicht Monitoring und Analyse von Clickstream-Daten und Kundentransaktionen.

Vulnerabilities 9

  • Critical 9.8
    CVE-2026-20253 Exploited Public exploit Scanner template EPSS 97%

    Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

    In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. The vulnerability exists because the PostgreSQL sidecar service endpo…

    Splunk Splunk Enterprise
    KEV Jun 18, 2026
  • High 8.8
    CVE-2026-20251 Public exploit EPSS 31%

    Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk Secure Gateway versions below 3.10.6, 3.9.20, and 3.8.67, a low-privileged user…

    Splunk Splunk Enterprise Splunk Cloud Platform Splunk Secure Gateway
  • High 7.6
    CVE-2026-20252

    Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.2604.3, 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk ro…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • High 7.1
    CVE-2026-20258

    Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.11, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could sto…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20254

    Information Disclosure through External Content Restriction Bypass in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20255

    Improper Input Validation through Classic Dashboards in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20256

    Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could cau…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.7
    CVE-2026-20257

    Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cra…

    Splunk Splunk Enterprise Splunk Cloud Platform
  • Medium 5.5
    CVE-2026-20259

    Improper Access Control in Splunk Enterprise

    In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.0, 10.3.2512.12, 10.2.2510.15, 10.1.2507.23, 10.0.2503.14, and 9.3.2411.131, a user who holds a Splunk role that contains the high-privilege capability `…

    Splunk Splunk Enterprise Splunk Cloud Platform

Revision history

  1. #3

    Exploit aufgenommen CVE-2026-20253

  2. #2

    PoC für CVE-2026-20253 aufgenommen

  3. #1

    Initiale Fassung

References