CVE-2026-102257: A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a…

High severity · published Oct 7, 2026

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a…

7.2

CVSS

0.7%

EPSS

On KEV

Description

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.7% · higher than 54% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

SMA1000 · SonicWall

12.4.3-03526 (platform-hotfix) and older versions; 12.5.0-02952 (platform-hotfix) and older versions · source: vendor

In the news

VulnerabilityHigh

ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-102257.

CVE-2026-102257

Oct 15, 2026·Zero Day Initiative

Affected product

SMA1000

SonicWall

All SMA1000 CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-102257

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-102257

vendor-advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017