References https://www.aqtd.com/nd.jsp?id=7584&groupId=-1 https://www.anquanke.com/post/id=305909 https://www.secrss.com/articles/43873 https://www.szaiedu.cn/xxhglzx/info/1172/3322.htm https://nic.seu.edu.cn/info/1047/1172.htm https://www.tenablecloud.cn/plugins/nessus/301864 https://advisory.splunk.com/advisories/SVD-2025-0601 https://advisory.splunk.com/advisories/SVD-2026-0301 https://app.opencve.io/cve/?vendor=splunk https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-01-23-2026/ https://zeropath.com/blog/cve-2026-20204-splunk-enterprise-rce-apptemp
Related VulnerabilitiesPoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File UploadTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)智能环保云平台 /Enterprise/CreateCode_Simple SQL 注入漏洞PoCTRUfusion Enterprise /trufusionPortal/getCobrandingData 文件读取漏洞(CVE-2025-27222)PoCCVE-2025-32355: Rocket TRUfusion Enterprise - Server Side Request ForgeryPoC安科瑞-智能环保云平台 /MainMonitor/GetEnterpriseInfoMapByDate/GetDates SQL 注入漏洞Elastic Cloud Enterprise 访问控制不当漏洞 可导致权限提升TRUfusion Enterprise 认证绕过漏洞(CVE-2025-27223)TRUfusion Enterprise 目录遍历漏洞(CVE-2025-27222)TRUfusion Enterprise 未授权访问漏洞(CVE-2025-27225)安科瑞-GetEnterpriseInfoMapHM-SQL注入