Splunk — PoC Archivehttps://poc.intelseclab.com/tags/splunk/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Splunk Secure Gateway jsonpickle Deserialization RCE (CVE-2026-20251)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-20251-splunk-jsonpickle-deserialization/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-20251-splunk-jsonpickle-deserialization/High severity (CVSS 8.8) — web · CVE-2026-20251. Status: PoC. Affects: Splunk Secure Gateway (SSG) app on Splunk Enterprise. Tags: splunk, deserialization, jsonpickle, rce, kv-store, python, validator-bypass, spacebridge.webHighsplunkdeserializationjsonpicklercekv-storepythonvalidator-bypassspacebridgeSplunk Enterprise Pre-Auth RCE via PostgreSQL Sidecar (CVE-2026-20253)https://poc.intelseclab.com/pocs/web/2026-06-28_cve-2026-20253-splunk-preauth-rce/Sun, 28 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-06-28_cve-2026-20253-splunk-preauth-rce/Critical severity — web · CVE-2026-20253. Status: PoC. Affects: Splunk Enterprise. Tags: pre-auth, RCE, PostgreSQL, Splunk, CISA-KEV, lo-export, sidecar, unauthenticated, file-write.webCriticalpre-authRCEPostgreSQLSplunkCISA-KEVlo-exportsidecarunauthenticatedfile-write