Security
CISA orders federal agencies to patch exploited Splunk flaw by 21 June
CISA has mandated federal agencies to patch a critical Splunk Enterprise vulnerability (CVE-2026-20253) by 21 June 2026, following evidence of in-the-wild attacks. The flaw allows unauthenticated file operations via a PostgreSQL sidecar endpoint.