CVE-2026-20253 CISA KEV · Actively exploited
Missing authentication in Splunk
CVSS score
9.8
EPSS probability
%96.9
Risk score
19.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
PoC de CVE-2026-20253: RCE pre-autenticacion en Splunk Enterprise.
Makefile Go / Python
watchtowrlabs/watchTowr-vs-Splunk-CVE-2026-20253
Makefile Go / Python
Nuclei: Splunk Enterprise & Cloud Platform - Unrestricted File Upload
Makefile Go / Python
NVD reference
https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/
Makefile Go / Python
Similar Vulnerabilities
8.1
CVE-2021-22901
Use after free in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %64
6.5
CVE-2022-32206
Resource allocation without limits in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %36
7.5
CVE-2022-35737
Vulnerability in N/a
N
Patch status unknownEPSS %23
4.3
CVE-2022-32205
Resource allocation without limits in N/a Https://github.com/curl/curl
N
Patch verifiedEPSS %31
7.5
CVE-2022-43551
Vulnerability in N/a Https://github.com/curl/curl
N
Patch status unknownEPSS %17
9.8
CVE-2022-32207
Vulnerability in N/a Https://github.com/curl/curl
N
Patch status unknownEPSS %12
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-20253"