cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

SonicWall and Splunk Patch Critical Vulnerabilities, Including Code-Execution Flaws

· Original article ↗

Summary

SonicWall and Splunk released patches for multiple vulnerabilities, including critical flaws that could enable code execution. SonicWall said there is no evidence the issues are being exploited in the wild.

Key points

  • SonicWall patched four vulnerabilities in SMA1000 appliances and urged users to update to versions 12.5.0-03082 or 12.4.3-03670.
  • SonicWall’s CVE-2026-102255 is a pre-authentication SSRF flaw with a CVSS score of 10 that could let unauthenticated attackers reach internal functionality and perform unauthorized operations.
  • Other SonicWall flaws could enable remote code execution and cross-site scripting. The company reported no evidence of exploitation and said its firewall products’ SSL-VPN is not affected.
  • Splunk fixed dozens of flaws across Splunk Enterprise, MCP Server, and Splunk Add-on for Amazon Web Services.
  • Three critical Splunk Enterprise flaws could allow arbitrary command execution, unauthorized access, or code injection.
  • A medium-severity MCP Server flaw could let an authenticated user change API settings to send requests to an attacker-controlled URL.

Article Details

Vulnerability Types
  • Server-side request forgery (SSRF)
  • Remote code execution (RCE)
  • Cross-site scripting (XSS)
  • Arbitrary command execution
  • Unauthorized access
  • Code injection
Severity
Critical, high, and medium severity vulnerabilities are reported.
Exploitation Status
not_reported
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-102255The most severe of the issues, tracked as CVE-2026-102255 (CVSS score of 10), is a pre-authenticated SSRF bug that exists due to an unintended alternate access path.

Vendors

SonicWallSplunk and SonicWall on Wednesday announced patches for multiple critical- and high-severity vulnerabilities in their products, including flaws that could lead to arbitrary code execution.SplunkSplunk and SonicWall on Wednesday announced patches for multiple critical- and high-severity vulnerabilities in their products, including flaws that could lead to arbitrary code execution.

Products

Add-on for Amazon Web ServicesSplunk announced fixes for dozens of security flaws in Splunk Enterprise, MCP Server, and Add-on for Amazon Web Services.MCP ServerSplunk announced fixes for dozens of security flaws in Splunk Enterprise, MCP Server, and Add-on for Amazon Web Services.SMA1000SonicWall rolled out fixes for four vulnerabilities in its SMA1000 appliances, urging users to update to versions 12.5.0-03082 and 12.4.3-03670 as soon as possible.Splunk EnterpriseSplunk announced fixes for dozens of security flaws in Splunk Enterprise, MCP Server, and Add-on for Amazon Web Services.

Related Articles