The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
- Published
- Record updated
Summary
SonicWall disclosed CVE-2026-102255, rated 10 on CVSS, a pre-authentication SSRF vulnerability in the SMA1000 Appliance Work Place interface. An unintended access path could let attackers direct the appliance to issue requests on their behalf and reach internal functions to perform unauthorized actions. The affected models are the SMA 1000 Models 6210, 7210, and 8200v running software versions 12.4.3-03526 and 12.5.0-02952 and earlier.
Mitigation
Customers can download the latest platform-hotfix from mysonicwall.com. SonicWall "strongly advises" customers using the appliances to upgrade to the fixed release version.