reactivezero/CVE-2026-20251

PoC

CVE-2026-20251 — Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research

view exploit source poc_in_githubauthor reactivezeropublished 2026-06-26catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-20251US	—	32.2% (98th)	Exploit	2026-06-10
In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22, and 9.3.2411.132, and Splunk…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.