SonicWall Appliance Vulnerability Sees Exploitation Attempts After Patch
Threat actors have started exploiting a critical vulnerability in SonicWall SMA 1000 appliances soon after it became public. The issue is tracked as CVE-2026-102255 and has a CVSS score of 10.0. It is a pre-authentication server-side request forgery flaw that could let a remote attacker make the appliance send requests on their behalf.
SonicWall SMA 1000 appliances are affected by a critical flaw tracked as CVE-2026-102255. It has a CVSS score of 10.0, the highest severity rating. The issue is a pre-authentication server-side request forgery flaw, meaning an attacker may not need valid credentials before attempting to abuse it.
Exploitation attempts have begun after the vulnerability became public and a patch was available. Because the flaw could let a remote attacker make the appliance send requests on their behalf, organizations using these appliances may need to review exposure and apply available fixes.
Organizations using SonicWall SMA 1000 appliances could face heightened risk if the flaw is exploited. A successful pre-authentication SSRF attack may allow a remote actor to make the appliance send requests on their behalf, potentially exposing systems or data reachable through it. The broader impact may depend on how many appliances are