[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLUMzqN5WlyVzETJlZI-DcvYM_aNLD5zA_WI1jRq0Aig":3},{"article":4,"iocs":37,"watch_terms":42,"solutions":43,"lesson":109},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"de7a8cee-f4ad-47b7-9109-f857c03bb74d","SonicWall and Splunk Patch Critical Vulnerabilities","sonicwall-and-splunk-patch-critical-vulnerabilities-b55507","Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.","SonicWall released fixes for four vulnerabilities in SMA1000 appliances, including CVE-2026-102255 (CVSS 10.0), a pre-authenticated SSRF flaw enabling remote unauthenticated attackers to bypass authentication and perform unauthorized operations. Splunk patched dozens of flaws across Enterprise, MCP Server, and AWS Add-on products, including three critical bugs enabling arbitrary command execution and unauthorized access. Both vendors report no active exploitation in the wild at the time of disclosure.","SonicWall and Splunk patch critical vulnerabilities allowing authentication bypass and code execution.","https:\u002F\u002Fwww.securityweek.com\u002Fsonicwall-and-splunk-patch-critical-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F07\u002Fsoftware-vulnerability-patch-update.jpg","2026-10-08T12:37:32+00:00","2026-10-08T14:00:21.351042+00:00",9,[17,20,22,25,27],{"name":18,"type":19},"SonicWall","vendor",{"name":21,"type":19},"Splunk",{"name":23,"type":24},"SonicWall SMA1000","product",{"name":26,"type":24},"Splunk Enterprise",{"name":28,"type":24},"MCP Server","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35],{"category":36},{"id":29,"icon":31,"name":32,"slug":33},[38],{"type":39,"value":40,"context":41},"cve","CVE-2026-102255","Pre-authenticated SSRF in SonicWall SMA1000 appliances, CVSS 10.0, allows remote unauthenticated attackers to bypass authentication and perform unauthorized operations",[18,21,23],{"controls":44,"vendors":99},[45,74],{"slug":46,"name":47,"problem":48,"products":49},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":75,"name":76,"problem":77,"products":78},"patch-management","Automated patch management","Known holes get closed in days, not months.",[79,87,91],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":75,"product_name":88,"url":89,"description":90},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",[100,105],{"slug":101,"name":18,"logo_path":102,"roles":103},"sonicwall","\u002Fvendor-logos\u002Fsonicwall.png",[104],"affected",{"slug":106,"name":21,"logo_path":107,"roles":108},"splunk","\u002Fvendor-logos\u002Fsplunk.png",[104],{"slug":110,"title":111,"body":112,"framework_refs":113,"framework_notes":122},"critical-flaws-in-sonicwall-and-splunk-demand-urgent-patching","Critical Flaws in SonicWall and Splunk Demand Urgent Patching","SonicWall's SMA1000 appliances carried a CVSS 10.0 pre-authenticated SSRF vulnerability allowing unauthenticated attackers to bypass authentication entirely — one of the most severe possible flaw classes for an internet-facing security appliance. Splunk's enterprise and cloud products simultaneously exposed organizations to arbitrary command execution across multiple product lines, compounding risk for environments using both vendors. The fact that no active exploitation had been detected at disclosure time represents a narrow but time-limited window to act before threat actors weaponize these vulnerabilities. Delays in patching critical network and SIEM infrastructure are among the most common precursors to large-scale breaches, making rapid response essential.",[114,115,116,117,118,119,120,121],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-40 Rev 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-7: Boundary Protection","ITIL Change Management: Emergency Change Procedure","NIST CSF ID.AM-2: Software platforms and applications are inventoried",{}]