Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

As cited

Copy frozen at 2026-10-12 13:19 UTC (site build).

vulnerabilities

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Threat actors exploited CVE-2026-102255, a critical pre-authenticated server-side request forgery (SSRF) vulnerability in SonicWall Secure Mobile Access (SMA) 1000 appliances, in 135 documented attempts within days of public disclosure. The flaw carries a CVSS 3.1 score of 10.0 and allows remote attackers to direct the appliance to issue requests on their behalf.

Why it matters: Organizations running SonicWall SMA 1000 appliances face immediate exploitation risk and should prioritize patching to prevent unauthorized lateral network access and data exfiltration.

Source published

2026-10-12 10:36 UTC

First seen by Cybersecurity Tracker

2026-10-12 12:30 UTC