CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
Source Bleeping Computer
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 22 Jun 2026, 17:15 UTC
What to do
AI-suggested
Splunk has released official patches that remediate this vulnerability; customers are strongly urged to upgrade to the fixed software releases immediately. For environments where immediate patching is not feasible, disabling the PostgreSQL sidecar service endpoint is recommended to remove the attack surface, with the caveat that this may disrupt Edge Processor, OpAmp, or SPL2 data pipelines. CISA mandates U.S. federal agencies to patch by the specified deadline. Patch status is confirmed as fixed in the updated Splunk releases; users should consult the official Splunk security advisory for exact fixed versions and apply updates promptly.
Description
CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. [...]