CVE-2026-102255

Published Oct 7, 2026

Last updated 2 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-102255 is a pre-authentication server-side request forgery (SSRF) vulnerability affecting SonicWall Secure Mobile Access (SMA) 1000 series appliances, specifically models 6210, 7210, and 8200v. The flaw resides in the Appliance WorkPlace interface, which is the web portal users access to log in and reach internal applications. It stems from an unintended alternate access-path weakness that allows a remote, unauthenticated attacker to send crafted requests to the internet-facing portal. By exploiting this vulnerability, an attacker can direct the appliance to issue requests on their behalf, enabling them to reach internal functionality and perform unauthorized operations. SonicWall released hotfixes in October 2026 to address the issue, urging users to update their systems. At the time of the announcement, the vendor stated there was no evidence that the vulnerability was being actively exploited in the wild.

Description: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
Source: PSIRT@sonicwall.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

PSIRT@sonicwall.com: CWE-441

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

References