VULNpocalypse
Exploited vulnerabilitiesBriefConfirmed by two or more outlets

Splunk Enterprise unauthenticated RCE (CVE-2026-20253)

CVSS 9.8. Splunk confirmed limited exploitation.

Disclosed

What happened

  • CVSS 9.8. Splunk confirmed limited exploitation. In KEV per secondary sources.

Live scores

Live scores

CVE-2026-20253
EPSS
0.969
very likely to be attacked soon
VEDAS
0.985
strong exploit evidence
On CISA KEV
Yes, since 2026-06-18
Detection rule
Nuclei · Suricata
EPSS (chance of attack)
100.1CVE-2026-20253 EPSS over time2026-082026-11-01
VEDAS (exploit evidence)
100.9CVE-2026-20253 VEDAS over time2026-082026-11-01

Thin horizontal line: the “likely” (EPSS 0.10) or “strong” (VEDAS 0.90) threshold. Shaded “no data” areas are periods when cve-scores did not publish.

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.