Is CVE-2026-102258 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102258?

CVE-2026-102258 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-102258

Description

Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC).

Threat reporting mentioning CVE-2026-102258

SonicWall Patches SSRF Flaw in SMA1000 AppliancesSonicWall has released hotfixes for a server-side request forgery (SSRF) vulnerability, CVE-2026-102255, affecting its SMA1000 series appliances. The flaw allows remote unauthentic…