🛡️ CVE-2026-20253

The items that name it 3

• watchTowr Labs: Splunk Enterprise CVE-2026-20253 Pre-Auth RCE via PostgreSQL Sidecar
  writeup2026-06-12It is written here as CVE-2026-20253 (Splunk Enterprise PostgreSQL Sidecar Service Endpoint, no authentication required, CVSS 9.8; Splunk advisory published June 10th).

  Splunk Enterprise PostgreSQL Sidecar Service Endpoint, no authentication required, CVSS 9.8; Splunk advisory published June 10th

• Orca: Splunk Enterprise Critical CVEs
  advisory2026-06-12

  Unauthenticated arbitrary file creation/truncation via a PostgreSQL sidecar service endpoint in Splunk Enterprise that completely lacks authentication controls (CWE-306). No authentication or user interaction required.

• watchTowr detection artifact generator for Splunk CVE-2026-20253
  repo