Ssrf
Security incidents tagged Ssrf. Newest first.
1 Ssrf incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 1
- Patched
- 1
- Days without an incident
- 18
- Longest quiet run: 15 days (Oct 10–Oct 24)
- Patched
SonicWall SMA1000: max-severity pre-auth SSRF exploited days after the patch (CVE-2026-102255)
CVE-2026-102255 (CVSS 10.0) is a pre-authentication server-side request forgery in the SMA1000 Appliance Work Place interface: an unintended alternate access path lets a remote attacker make the appliance send requests to internal functionality and perform unauthorized operations. It affects SMA1000 6210, 7210 and 8200v models (not SMA 100 or firewall SSL-VPN). SonicWall disclosed it on Oct 6; exploitation attempts began Oct 8, and Horizon3.ai warns it can lead to device takeover. Update to 12.4.3-03670 or 12.5.0-03082.
SonicWall SMA1000 (6210, 7210, 8200v)Since Oct 6, 2026
