Is CVE-2026-102255 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-102255

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Threat reporting mentioning CVE-2026-102255

SonicWall Patches SSRF Flaw in SMA1000 AppliancesSonicWall has released hotfixes for a server-side request forgery (SSRF) vulnerability, CVE-2026-102255, affecting its SMA1000 series appliances. The flaw allows remote unauthentic…