CVE-2026-102255

SonicWall SMA1000

Medium priority: severe, but no known exploitation

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

In the news

• Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch · The Hacker News
• Critical SonicWall Vulnerability Exploited Days After Disclosure · SecurityWeek
• Max severity SonicWall SMA1000 flaw now exploited in attacks · BleepingComputer
• Múltiples vulnerabilidades en SMA 1000 de SonicWall · INCIBE-CERT