U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday


U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday

Pierluigi Paganini
June 19, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Splunk Enterprise flaw, tracked as CVE-2026-20253 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog.

The flaw CVE-2026-20253 is an improper authentication vulnerability in the PostgreSQL sidecar service of Splunk Enterprise that allows unauthenticated remote attackers to create or truncate arbitrary files on affected systems. The issue stems from missing authentication controls on a PostgreSQL sidecar service endpoint, enabling any network-reachable user to invoke file operations without valid credentials.

“In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.” reads the advisory. “The vulnerability exists because the PostgreSQL sidecar service endpoint lacks authentication controls, allowing any network-reachable user to invoke file operations without credentials.”

Successful exploitation could lead to data loss, service disruption, or further compromise depending on the files targeted.

The vulnerability affects Splunk Enterprise 10.2 versions prior to 10.2.4 and 10.0 versions prior to 10.0.7, while versions 9.4 and earlier are not impacted. Organizations unable to immediately apply the available patches should mitigate the risk by disabling the PostgreSQL sidecar service.

Splunk PSIRT confirmed it is aware of limited active exploitation of the vulnerability and urged customers to immediately upgrade to patched versions to mitigate the risk. The company did not disclose technical details about the attacks targeting this issue.

“In June 2026, the Splunk Product Security Incident Response Team (PSIRT) became aware of limited exploitation of this vulnerability. Splunk strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.” continues the advisory.

According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.

Experts also recommend that private organizations review the Catalog and address the vulnerabilities in their infrastructure.

CISA orders federal agencies to fix the vulnerability by the end of this week, on June 21, 2026.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, CISA)







Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


When Encanto was released, it was something of a cultural phenomenon. You couldn’t escape the song “We Don’t Talk About Bruno,” and the soundtrack went to the top of the charts. If you loved Encanto, there’s another overlooked Lin-Manuel Miranda animated musical on Netflix that’s better in many ways.

Vivo is another Lin-Manuel Miranda musical

He’s also the voice of the lead character

Vivo the kinkajou from the movie Vivo. Credit: Sony Pictures Animation

Vivo is a 2021 animated musical comedy from Sony Pictures Animation, the same studio behind smash-hit movies such as Spider-Man: Into the Spider-Verse and KPop Demon Hunters. Directed by Kirk DeMicco, who co-wrote it with Quiara Alegría Hudes, it features original songs written by Lin-Manuel Miranda, the musical genius who shot to superstardom on the back of Hamilton.

Miranda also plays the title character of Vivo, a kinkajou (a small, nocturnal mammal) whose days are spent earning money by playing music in the plaza with his aging owner, Andrés. When Andrés dies, Vivo makes it his mission to deliver a song that Andrés wrote to his old friend Marta Sandoval, a famous singer played by Gloria Estefan. The song reveals Andrés’ true feelings for Marta, but he could never bring himself to give it to her.

Vivo is helped on his quest by Gabi, a young misfit and the daughter of Andrés’ niece. The movie follows their journey through the Florida Everglades to reach Miami and deliver the song.

Why Vivo flew under the radar

The big theatrical release never happened

Gabi and Vivo on a raft in the movie Vivo. Credit: Sony Pictures Animation

Vivo is an animated musical from a major animation studio, with a cast of big names including Miranda, Gloria Estefan, and Zoe Saldaña. It features music from one of the most in-demand songwriters in the world, who also stars in it. Why isn’t it more well-known?

Perhaps the biggest reason is that Vivo never got its expected theatrical release. After the global pandemic disrupted Sony’s plans for a wide theatrical release, the rights were sold to Netflix. Instead of a major theatrical run, it joined the huge catalog of Netflix, where shows and movies all too often get buried by the churn of new content.

It meant that, unlike Encanto, Vivo never really got the chance to enter the zeitgeist or become a TikTok staple. Its fairly quiet release on a streaming service meant that it never got the attention that it deserved.

Subscription with ads

Yes, $8/month

Simultaneous streams

Two or four

Stream licensed and original programming with a monthly Netflix subscription.


Vivo’s music hits different

Gloria Estefan still has it

When Encanto came out, people raved about the music. The song “We Don’t Talk About Bruno” went viral, with an endless stream of TikTok videos. To my mind, however, the music in Vivo is just so much better.

I never really got the hype about “We Don’t Talk About Bruno.” It’s not bad, but it’s not even the best song in Encanto. While the music in Encanto is good, none of the songs really stand out as being classics. I listen to a lot of Disney movie soundtracks with my kids, and Encanto very rarely makes the playlist, while Moana, which also includes songs written by Lin-Manuel Miranda, gets played far more often.​​​​​​​


The Pixar Logo featured before their movies


Pixar’s best movie isn’t one of the old classics, it’s this blockbuster from 2017

I’m sorry, Toy Story, but a new winner has entered the chat

What gets played a lot is the Vivo soundtrack because it’s genuinely brilliant. There’s something for everyone, too; there are four of us in the family, and each of us has a different favorite song from the soundtrack. That’s how good it is.

“One of a Kind” is the song that introduces us to Vivo and Andrés, and it’s a great mix of classic Cuban mambo and clave rhythms combined with Lin-Manuel Miranda’s trademark hip-hop flow. “My Own Drum” is an absolute banger sung by Gabi featuring possibly the greatest recorder solo of all time. My personal favorite, “Keep The Beat,” is a gorgeous song about keeping going when things start to change.

The most beautiful song in the movie is “Inside Your Heart,” performed by the legendary Gloria Estefan. This is the song that Andrés wrote for Marta, expressing his feelings for her. It’s a stunning song, and Estefan’s voice still sounds incredible. For me, it lands far harder than anything in Encanto.

What Vivo offers that Encanto doesn’t

There’s more than just the awesome music

2D animation of a young Andres and Marta dancing from the movie Vivo. Credit: Sony Pictures Animation

While both movies have music written by Lin-Manuel Miranda, only one of them features the songwriter in the main cast. Some of the fast-paced rhymes in Vivo are so distinctive that you can’t imagine anyone else doing them justice, as Dwayne Johnson proved in Moana.

Vivo also has a more dynamic story, with the action involving a race from Cuba to Miami rather than being set entirely within one location like Encanto. It also includes some interesting stylized 2D sequences that mix up the look of the movie. The emotional stakes are also much higher in Vivo, with a story that touches on death, regret, lost love, and finding your place in the world.

That’s not to say it’s a perfect movie. The plot does dip a little in the middle, but the stunning music and bittersweet ending make up for the flaws.


A woman watching Netflix with two kids, a 'Kids' icon in the background, and the Netflix logo.


My Kids Love These 10 Netflix Shows—And Shockingly, So Do I

Are you a parent tired of watching awful kids’ shows? Give yourself a break with these Netflix series that will entertain both you and your children.


Check out Vivo if you haven’t already

If you loved Encanto and you haven’t watched Vivo, you should definitely check it out. It’s a movie that really deserves more attention than it gets. I guarantee it will be the best kinkajou-based animated musical you’ll ever see.



Source link