CVE-2026-102255 | defend.network

What is CVE-2026-102255?

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

CVSS10 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS<1% · P39

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWECWE-441

NVD published2026-10-07

NVD last modified2026-10-07

Timeline

2026-10-07Published to the U.S. National Vulnerability Database (NVD)
2026-10-13First covered in a defend.network daily briefing

Affected product

See advisory

Remediation Steps

Apply the latest security patch from SonicWall for SMA 1000 appliances
Review firewall logs for exploitation attempts targeting the SSRF endpoint
Restrict pre-authenticated access to SMA 1000 admin interfaces to trusted networks
Monitor for unusual outbound requests initiated by the appliance

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 2 of October 2026 (October 12 – 18)
WordPress Bricksforge & SonicWall SMA CVSS 10.0 exploits; Ledger spy chips drain wallets (2026-10-13)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.