Skip to content

Back to the catalog

SonicWall and Splunk Patch Critical Vulnerabilities
securityweek.comarticle

SonicWall and Splunk Patch Critical Vulnerabilities

SonicWall patched four SMA1000 appliance vulnerabilities including CVE-2026-102255, a pre-authenticated SSRF flaw (CVSS 10) that lets an unauthenticated remote attacker abuse an unintended alternate access path to reach internal functionality; two other high-severity bugs enable RCE and one medium-severity bug enables XSS. Splunk separately fixed dozens of flaws across Splunk Enterprise, MCP Server, and the Add-on for AWS, including three critical Splunk Enterprise bugs allowing arbitrary command execution, unauthorized access, and code injection, plus a medium-severity MCP Server issue letting an authenticated user redirect API requests to an attacker-controlled URL. SonicWall says SSL-VPN on its firewall products is unaffected and no in-the-wild exploitation has been observed.

TL;DR SonicWall fixed a CVSS-10 pre-auth SSRF in SMA1000 (CVE-2026-102255) while Splunk patched three critical RCE/injection bugs in Splunk Enterprise and an MCP Server SSRF flaw.
Open original ↗

CVEs named here

  • CVE-2026-102255

Technologies named here

  • SonicWall SMA1000
  • SonicWall Firewall SSL-VPN
  • Splunk Enterprise
  • Splunk MCP Server
  • Splunk Add-on for Amazon Web Services
  • Splunk
  • Model Context Protocol
  • AWS
  • SonicWall

Techniques named here

  • Pre-authenticated SSRF via unintended alternate access path
  • Remote code execution
  • Cross-site scripting
  • Arbitrary command execution
  • Unauthorized access
  • Code injection
  • SSRF

Related in AppSec