As cited
Copy frozen at (site build).
vulnerabilities
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
SonicWall patched four vulnerabilities in Secure Mobile Access (SMA) 1000 appliances, including CVE-2026-102255, a server-side request forgery (SSRF) flaw affecting pre-authentication access. The vulnerability enables remote attackers without credentials to force the appliance to make requests on their behalf and access internal systems. The vendor reported no active exploitation at the time of the patch release.
Why it matters: Organizations running SMA 1000 appliances should apply the patch immediately for CVE-2026-102255, as the pre-authentication SSRF flaw could enable attackers to bypass authentication and reach internal resources and functionality.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
SonicWall released patches for four vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances. One of these flaws, CVE-2026-102255, is a pre-authentication server-side request forgery (SSRF) that could allow remote attackers to perform unauthorized operations on affected devices.
Why it matters: Organizations running SonicWall SMA 1000 appliances should apply the patches to their remote access infrastructure, as this unauthenticated vulnerability bypasses the need for credentials to reach internal systems.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
SonicWall released patches for four vulnerabilities in its Secure Mobile Access (SMA) 1000 appliances, including CVE-2026-102255, a pre-authentication server-side request forgery (SSRF) flaw with a CVSS score of 10.0. The flaw could permit unauthenticated remote attackers to issue requests on the appliance's behalf and access internal functionality. SonicWall stated there is no current evidence of active exploitation.
Why it matters: Organizations running SMA 1000 appliances face critical remote compromise risk and must apply patches immediately, as the unauthenticated nature of this flaw means any internet-facing appliance is at risk regardless of network posture.
- Source published
- First seen by Cybersecurity Tracker