CERT24SonicWall patches critical pre-authentication SSRF flaw in SMA1000 appliancesLoading data…
CERT24Threat Observatory
Period

SonicWall patches critical pre-authentication SSRF flaw in SMA1000 appliances

SonicWall has released fixes for four vulnerabilities in SMA1000 appliances. The most serious, CVE-2026-102255, is a pre-authentication server-side request forgery (SSRF) flaw that could allow an unauthenticated attacker to reach internal functionality and perform unauthorized operations. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that the four flaws have been used in attacks.

← Back to intelligence

SonicWall patches critical pre-authentication SSRF flaw in SMA1000 appliances

SonicWall has released fixes for four vulnerabilities in SMA1000 appliances. The most serious, CVE-2026-102255, is a pre-authentication server-side request forgery (SSRF) flaw that could allow an unauthenticated attacker to reach internal functionality and perform unauthorized operations. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that the four flaws have been used in attacks.