{"version":"1.0","type":"rich","provider_name":"RootPwn","provider_url":"https://rootpwn.me","title":"Splunk Secure Gateway RCE via Unsafe Deserialization (SVD-2026-0601)","description":"A low‑privileged user can execute arbitrary code on Splunk Enterprise and Cloud Platform instances by sending crafted JSON to the Secure Gateway app. The flaw exists in Splunk versions prior to 10.2.4, 10.0.7, 9.4.12, 9.3.13, and corresponding Cloud and Secure Gateway releases. Defenders should upgr","url":"https://rootpwn.me/news/splunk-secure-gateway-rce-via-unsafe-deserialization-svd-2026-0601","thumbnail_url":"https://rootpwn.me/images/8c388e7a78be4757822c382795a2da99.jpg","thumbnail_width":1600,"thumbnail_height":900}