Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
2026-06-14T01:24:05Z•749b089b71131b0ffe9403e28bece858d72c9c96296239827e1e984c4ad9965f
CVE-2026-20253CVE-2026-25089CVE-2026-35273CVE-2026-5027agentjackingai-securityanthropicarch-linuxaur-compromisecisa-kevebpf-rootkitfortinetinfostealerlangfloworacle-peoplesoftphishingremote code executionsplunksupply-chainunauthenticated
What happened
Multiple high-impact security incidents and vulnerability disclosures were reported: Splunk Enterprise fixes a critical unauthenticated file-operation and RCE flaw (CVE-2026-20253, CVSS 9.8) — update to 10.2.4/10.0.7+ recommended. Oracle PeopleSoft was exploited in the wild (CVE-2026-35273) by the ShinyHunters crew targeting universities. Fortinet, Ivanti, SAP and others released patches for critical flaws including FortiSandbox command injection (CVE-2026-25089). Langflow’s path-traversal bug (CVE-2026-5027) is under active exploitation; CISA added multiple vulnerabilities (e.g., CVE-2026-202
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 749b089b71131b0ffe9403e28bece858d72c9c96296239827e1e984c4ad9965f
- Enrichment time
- 2026-06-14T01:24:05Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.