Vulnerability · Published Oct 7, 2026 · Assigned by sonicwall

CVE-2026-102255

Critical 10.0

In plain English

A critical-severity server-side request forgery in SMA1000 from SonicWall. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)1.0%top 37.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Affected products (as reported)

Vendor	Product	Versions
SonicWall	SMA1000	12.4.3-03526 (platform-hotfix) and older versions12.5.0-02952 (platform-hotfix) and older versions

Weakness: CWE-918, CWE-441 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 vendor-advisory