Attackers exploit critical SonicWall SMA 1000 flaw days after disclosure
The vulnerability, tracked as CVE-2026-102255, is a server-side request forgery flaw that requires no login and carries a maximum CVSS score of 10.0. The Hacker News reports 135 exploitation attempts after a patch, while SecurityWeek says the flaw could allow attackers to carry out unauthorized operations.
Covered by 4 publishers within 13 hours of the first report.
Reporting4
SecurityWeek Critical SonicWall Vulnerability Exploited Days After Disclosure · Ionut Arghire
The Hacker News Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch · info@thehackernews.com (The Hacker News)
Security Affairs SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin · Pierluigi Paganini
Dark Reading Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack · Rob Wright