CERT24SonicWall patches critical CVSS 10.0 SSRF vulnerability as attacks beginLoading data…
CERT24Threat Observatory
Period

SonicWall patches critical CVSS 10.0 SSRF vulnerability as attacks begin

Attackers have begun exploiting the unauthenticated server-side request forgery (SSRF) vulnerability CVE-2026-102255 in SonicWall SMA 1000 appliances. The vulnerability has a CVSS score of 10.0. SonicWall said it has found no evidence of exploitation, while researchers have detected exploitation attempts.

← Back to intelligence

SonicWall patches critical CVSS 10.0 SSRF vulnerability as attacks begin

Attackers have begun exploiting the unauthenticated server-side request forgery (SSRF) vulnerability CVE-2026-102255 in SonicWall SMA 1000 appliances. The vulnerability has a CVSS score of 10.0. SonicWall said it has found no evidence of exploitation, while researchers have detected exploitation attempts.