#3
BleepingComputer
general
June 19, 2026 at 10:39 UTC
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
By Sergiu Gatlan
AI Summary
CISA added a critical Splunk Enterprise vulnerability to its Known Exploited Vulnerabilities catalog and mandated that U.S. federal agencies patch by Sunday, June 22, 2026, indicating active exploitation in the wild. The flaw resides in Splunk's AI Toolkit and enables OS command injection. Organizations running Splunk Enterprise should prioritize this patch given active exploitation and the prevalence of Splunk in SOC environments.
Relevance score: 87.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →