Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication
Splunk issued security updates for a critical CVSS 9.8 vulnerability in Splunk Enterprise that allows unauthenticated remote code execution.
More info