CVE-2026-20253

CVE-2026-20253 affects Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.3 and 10.2.2510.14. The PostgreSQL sidecar service endpoint lacks authentication, allowing any network-reachable user to create or truncate arbitrary files. Remediation: u...