by Kastro
Paper/Archive/CVE-2026-102255

CVE-2026-102255

SonicWall SMA1000 — A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.

EPSS 1.0%CVSS 10.0
critical.is priorityof 100
42
CVSS 10.0 (ADP)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 62.2.622 × 2012.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Affected

ProductAffectedFixed inSource
SMA100012.4.3-03526 (platform-hotfix) and older versions–CNA
SMA100012.5.0-02952 (platform-hotfix) and older versions–CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017