Sidecar

Splunk Enterprise Pre-Auth RCE via PostgreSQL Sidecar (CVE-2026-20253)

CVE-2026-20253 is a critical unauthenticated RCE vulnerability in Splunk Enterprise arising from a missing authentication check on the PostgreSQL sidecar service endpoint /v1/postgres/recovery/backup. An unauthenticated attacker can reach this endpoint and…