Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure

CISA gave federal agencies three days to patch CVE-2026-20253, a Splunk Enterprise vulnerability enabling unauthenticated remote code execution. Attacks exploiting the flaw began days after its disclosure.