AI analysis
A post-authentication stored cross-site scripting flaw (CWE-79) exists in the SonicWall SMA 1000 Appliance Management Console (AMC). Under specific conditions, a remote attacker who is already authenticated as an administrator can store arbitrary JavaScript in the console so that it may later run in the AMC when that content is rendered. The practical impact is limited to the management-console context, such as executing script in another administrator’s session, rather than unauthenticated takeover of the appliance. SonicWall SMA 1000 appliances that use the AMC are affected; the advisory data does not list firmware versions, CVSS is not yet scored, and no public proof-of-concept is known. The issue is not in CISA KEV, so exploitation is none known, and it is distinct from the pre-authentication SSRF tracked as CVE-2026-102255.
What to do: Apply the SonicWall PSIRT fix for CVE-2026-102258 on SMA 1000 as soon as it is available for your build; the supplied data does not name a fixed version. Keep the Appliance Management Console off the internet and limited to trusted administrator networks, and review admin accounts and stored console content for unexpected script.
Affected
| SonicWall SMA 1000 Appliance Management Console (AMC) | — |
Estimated exposure
nicheLow thousands of enterprise appliances (order-of-magnitude estimate, not a measured count) — SMA 1000 is an enterprise secure-access appliance with a much smaller footprint than consumer or SMB products; historical public scans of SonicWall SMA management interfaces are on the order of thousands of hosts overall, and this issue…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC).