CVE-2026-102255: Critical SonicWall SMA1000 SSRF
SonicWall patched critical pre-auth SMA1000 SSRF CVE-2026-102255 after exploitation attempts hit honeypots.
SonicWall patched CVE-2026-102255, a critical pre-authentication server-side request forgery flaw rated CVSS 10.0 in the SMA1000 WorkPlace interface. An unintended access path lets an unauthenticated remote attacker make the appliance send requests toward internal functionality. Fixed hotfixes were released on October 6, and researchers later reported exploitation attempts against honeypot and decoy systems.
- CVE-2026-102255 is a CVSS 10.0 pre-authentication SSRF in SMA1000 WorkPlace.
- Unauthenticated attackers can make the appliance request internal functionality.
- SonicWall issued hotfixes on October 6.
- Researchers later saw exploitation attempts against honeypots and decoys.
- CVEs
- CVE-2026-102255
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102255 | Pre-auth SSRF in SonicWall SMA1000 Work Place interface | 10.0 | <1% | PoC ×2 |
From the original article
11 min read at socradar.io
CVE-2026-102255: Critical SonicWall SMA1000 SSRF SonicWall has patched CVE-2026-102255 , a critical pre-authentication Server-Side Request Forgery (SSRF) vulnerability affecting the WorkPlace interface of SMA1000 applian
By Ameer Owda · socradar.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.