SonicWall and Splunk Patch Critical Vulnerabilities

SonicWall's SMA1000 appliances carried a CVSS 10.0 pre-authenticated SSRF vulnerability allowing unauthenticated attackers to bypass authentication entirely — one of the most severe possible flaw classes for an internet-facing security appliance. Splunk's enterprise and cloud products simultaneously exposed organizations to arbitrary command execution across multiple product lines, compounding risk for environments using both vendors. The fact that no active exploitation had been detected at disclosure time represents a narrow but time-limited window to act before threat actors weaponize these vulnerabilities. Delays in patching critical network and SIEM infrastructure are among the most common precursors to large-scale breaches, making rapid response essential.