Critical severity · published Oct 7, 2026
CVE-2026-102255
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path
10.0
CVSS
1%
EPSS
No
On KEV
Description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
SMA1000 · SonicWall
12.4.3-03526 (platform-hotfix) and older versions; 12.5.0-02952 (platform-hotfix) and older versions · source: vendor
In the news
VulnerabilityCritical
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after public disclosure. The vulnerability is a server-side request forgery (SSRF) flaw that requires no login. […]
Oct 12, 2026·Security Affairs
VulnerabilityCritical
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure.
The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
Oct 12, 2026·The Hacker News
VulnerabilityCritical
Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]
Oct 9, 2026·BleepingComputer
VulnerabilityCritical
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could […]
Oct 7, 2026·Security Affairs
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-102255
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-102255
vendor-advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017
More from SMA1000
10.0
CVE-2026-83548
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
10.0
CVE-2026-15409
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
9.8
CVE-2025-23006
SonicWall SMA1000 Appliances Deserialization Vulnerability
7.8
CVE-2026-83549
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
7.2
CVE-2026-15410
SonicWall SMA1000 Appliances Code Injection Vulnerability