CVE-2026-20253 is a CVSS 9.8 pre-auth flaw in Splunk Enterprise's PostgreSQL sidecar service. An unauthenticated attacker can write files and chain the primitive to RCE. A public PoC exists; no workaround, patch only.
How CVE-2026-20253 Turns Splunk’s PostgreSQL Sidecar Into an Open Door on Latest Hacking News | Cyber Security News, Hacking Tools...