Ethical Hacking News
SonicWall has patched a critical Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances, which has been actively exploited by attackers. The vulnerability has a CVSS score of 10.0 and has been detected by multiple cybersecurity firms. Users are advised to apply the available hotfix as soon as possible to prevent potential attacks.
SonicWall has patched a critical Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances. The vulnerability, CVE-2026-102255, has a CVSS score of 10.0 and has been actively exploited by attackers. The vulnerability allows a remote unauthenticated attacker to exploit the appliance and perform unauthorized operations. Users are advised to apply the available hotfix as soon as possible to prevent potential attacks. The affected products and versions include SMA1000 Models – 6210, 7210, 8200v, with versions 12.4.3-03526 and older.
SonicWall has recently patched a critical Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances, which has been actively exploited by attackers just days after its public disclosure. The vulnerability, tracked as CVE-2026-102255, has a CVSS score of 10.0, making it one of the most critical vulnerabilities in recent times.
According to SonicWall, the vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. This allows a remote unauthenticated attacker to exploit the vulnerability and direct the appliance to issue requests on their behalf, reaching internal functionality and performing unauthorized operations. The company has stated that there is no workaround for this vulnerability and has recommended applying the available hotfix.
Cybersecurity firm Defused has detected unauthenticated SSRF traffic targeting their SonicWall SMA decoys since October 8, 2026, and notified their subscribers through their Radar service. Similarly, Previdian, another cybersecurity firm, has announced that its sensors have detected exploitation attempts targeting SonicWall SMA 1000 appliances, consistent with CVE-2026-102255. Researchers have recorded 135 attack attempts from two IP addresses in the United States, and SonicWall has not yet updated its security advisory to confirm that attackers are exploiting the flaw.
The affected products and versions include SMA1000 Models – 6210, 7210, 8200v, with versions 12.4.3-03526 (platform-hotfix) and older versions, as well as 12.5.0-02952 (platform-hotfix) and older versions. However, the company has pointed out that the flaws do not impact SSL-VPN running on SonicWall firewalls or the SMA 100 Series product line.
This critical vulnerability has been actively exploited by attackers, and it is essential for users to apply the available hotfix as soon as possible to prevent potential attacks. SonicWall has recommended applying the hotfix, which is available through the MySonicWall portal.
In conclusion, SonicWall has patched a critical SSRF vulnerability in their SMA 1000 appliances, which has been actively exploited by attackers. It is essential for users to apply the available hotfix as soon as possible to prevent potential attacks.
SonicWall has patched a critical Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances, which has been actively exploited by attackers. The vulnerability has a CVSS score of 10.0 and has been detected by multiple cybersecurity firms. Users are advised to apply the available hotfix as soon as possible to prevent potential attacks.
Related Information:
https://www.ethicalhackingnews.com/articles/SonicWall-Patches-Critical-SSRF-Flaw-as-Attacks-Intensify-ehn.shtml
https://securityaffairs.com/200816/hacking/sonicwall-patches-cvss-10-0-ssrf-flaw-as-attacks-begin.html
https://nvd.nist.gov/vuln/detail/CVE-2026-102255
https://www.cvedetails.com/cve/CVE-2026-102255/
Published: Mon Oct 12 10:38:56 2026 by llama3.2 3B Q4_K_M
