VulnerabilityPublished 11 Jun 2026

Splunk, Palo Alto Networks Patch Severe Vulnerabilities

Source SecurityWeek

Mentioned vulnerabilities

Severity

Medium

Rated by Threat Radar

Data as of 11 Jun 2026, 15:52 UTC

What to do

AI-suggested

Patches have been released by both Splunk and Palo Alto Networks addressing all identified vulnerabilities. Organizations using affected products should apply these official fixes promptly. There is no indication that any of these vulnerabilities are currently exploited in the wild. No additional mitigation steps beyond applying the vendor patches are specified.

Description

The security defects could allow attackers to create or modify arbitrary files and access and modify protected resources. The post Splunk, Palo Alto Networks Patch Severe Vulnerabilities appeared first on SecurityWeek .

Impact

Successful exploitation of the Splunk Enterprise vulnerability (CVE-2026-20253) allows unauthenticated attackers to create or truncate arbitrary files, potentially compromising system integrity. The Palo Alto Networks vulnerability (CVE-2026-0274) enables unauthorized access and modification of protected resources in Cortex platforms. Other high-severity Splunk vulnerabilities could lead to remote code execution, server-side request forgery, and cross-site scripting, increasing the risk of system compromise and data leakage. Medium-severity issues may facilitate sensitive data exfiltration and unauthorized changes to saved searches or logs. No active exploitation has been observed.

Summary

Splunk and Palo Alto Networks released patches for multiple security vulnerabilities across their product portfolios. Palo Alto Networks addressed a high-severity improper credential validation vulnerability (CVE-2026-0274) in Cortex XSOAR and Cortex XSIAM platforms that allows attackers to access and modify restricted resources without special configuration. Splunk fixed a critical arbitrary file creation and truncation vulnerability (CVE-2026-20253) in Splunk Enterprise exploitable without authentication via the PostgreSQL sidecar service endpoint. Additional high-severity flaws in Splunk Enterprise could lead to remote code execution, SSRF, and XSS attacks. Medium-severity issues affecting Splunk Enterprise and SOAR could enable data exfiltration, unauthorized reassignment of saved search ownership, and injection of ANSI escape codes into logs. Numerous third-party component vulnerabilities were also patched. Neither vendor reported any known exploitation in the wild.

References

securityweek.com/splunk-palo-alto-networks-patch-severe-vulnerabilities/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 11 Jun 2026, 11:03 UTC

References

Community reviews

Related threats