{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255) · updates",
  "home_page_url": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255",
  "feed_url": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255/feed.json",
  "description": "CVE-2026-102255 (CVSS 10.0) is a pre-authentication server-side request forgery in the SMA1000 Appliance Work Place interface: an unintended alternate access path lets a remote attacker make the appliance send requests to internal functionality and perform unauthorized operations. It affects SMA1000 6210, 7210 and 8200v models (not SMA 100 or firewall SSL-VPN). SonicWall disclosed it on Oct 6; exploitation attempts began Oct 8, and Horizon3.ai warns it can lead to device takeover. Update to 12.4.3-03670 or 12.5.0-03082.",
  "language": "en",
  "_pwn": {
    "slug": "sonicwall-sma1000-ssrf-cve-2026-102255",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255/feed.xml",
    "llms": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255/llms.txt",
    "json": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-09-e46494f9",
      "url": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-09-e46494f9",
      "title": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): BleepingComputer: the max-severity flaw is now exploited in attacks.",
      "content_text": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): BleepingComputer: the max-severity flaw is now exploited in attacks.\n\nSource: https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/",
      "date_published": "2026-10-09T00:00:00.000Z",
      "external_url": "https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-08-5f3dad61",
      "url": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-08-5f3dad61",
      "title": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): Defused decoys record the first exploitation attempts (crafted OPTIONS requests aimed at internal CouchDB); Previdian also sees attempts.",
      "content_text": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): Defused decoys record the first exploitation attempts (crafted OPTIONS requests aimed at internal CouchDB); Previdian also sees attempts.\n\nSource: https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/",
      "date_published": "2026-10-08T00:00:00.000Z",
      "external_url": "https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-06-9c7bfd87",
      "url": "https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-06-9c7bfd87",
      "title": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): SonicWall discloses CVE-2026-102255 and ships fixed SMA1000 builds.",
      "content_text": "SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): SonicWall discloses CVE-2026-102255 and ships fixed SMA1000 builds.\n\nSource: https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/",
      "date_published": "2026-10-06T00:00:00.000Z",
      "external_url": "https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/",
      "tags": [
        "critical"
      ]
    }
  ]
}