SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255) ยท updates https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255 CVE-2026-102255 (CVSS 10.0) is a pre-authentication server-side request forgery in the SMA1000 Appliance Work Place interface: an unintended alternate access path lets a remote attacker make the appliance send requests to internal functionality and perform unauthorized operations. It affects SMA1000 6210, 7210 and 8200v models (not SMA 100 or firewall SSL-VPN). SonicWall disclosed it on Oct 6; exploitation attempts began Oct 8, and Horizon3.ai warns it can lead to device takeover. Update to 12.4.3-03670 or 12.5.0-03082. en Fri, 09 Oct 2026 00:00:00 GMT SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): BleepingComputer: the max-severity flaw is now exploited in attacks. https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255 https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-09-e46494f9 Fri, 09 Oct 2026 00:00:00 GMT critical <p><a href="https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/">Source</a></p> SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): Defused decoys record the first exploitation attempts (crafted OPTIONS requests aimed at internal CouchDB); Previdian also sees attempts. https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255 https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-08-5f3dad61 Thu, 08 Oct 2026 00:00:00 GMT critical <p><a href="https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/">Source</a></p> SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255): SonicWall discloses CVE-2026-102255 and ships fixed SMA1000 builds. https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255 https://pwn.watch/i/sonicwall-sma1000-ssrf-cve-2026-102255#2026-10-06-9c7bfd87 Tue, 06 Oct 2026 00:00:00 GMT critical <p><a href="https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/">Source</a></p>