criticalVulnerability
Splunk Enterprise Missing Authentication for Critical Function Vulnerability
Published June 19, 2026•Axus Networks Threat Intelligence
Summary
Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.
Source: CISA KEV