Is CVE-2026-102256 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102256?

CVE-2026-102256 has a CVSS v3 severity of HIGH (7.8).

Back

CVE-2026-102256

Description

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

Threat reporting mentioning CVE-2026-102256

SonicWall Patches SSRF Flaw in SMA1000 AppliancesSonicWall has released hotfixes for a server-side request forgery (SSRF) vulnerability, CVE-2026-102255, affecting its SMA1000 series appliances. The flaw allows remote unauthentic…