Back Csa.Sg

Critical Vulnerability in SonicWall SMA1000 Series

Csa.Sg • October 8, 2026

SonicWall has released security updates to address a critical vulnerability in the SMA1000 series appliances. Users and administrators of affected products are advised to update to the latest version immediately.

SonicWall has released security updates to address a critical vulnerability (CVE-2026-102255) affecting the SMA 1000 series appliances.

This vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 10.0 out of 10.

Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to direct the appliance to issue requests on their behalf and access internal functionality and perform unauthorised operations.

This vulnerability affects the following SonicWall SMA 1000 models:

12.4.3-03526 (platform-hotfix) and older versions

12.5.0-02952 (platform-hotfix) and older versions

It does not affect the SMA 100 Series product line or SSL-VPN running on SonicWall firewalls.

Users and administrators of affected products are advised to update to platform-hotfix versions 12.4.3-03453 or 12.5.0-02835, or later releases, immediately.

↗ (opens in new tab)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall Patches Critical SSRF Vulnerability in SMA1000 Appliances On October 6, 2026, SonicWall released hotfixes for four vulnerabilities in its SMA1000 series appliances, including CVE-2026-102255, a critical server-side request forgery (SSRF) flaw rated 10.0 on the CVSS scale. This vulnerability allows unauthenticated attackers to exploit an unintended access path in the Appliance WorkPlace interface, enabling them to issue requests on behalf of the appliance and access internal functions. SonicWall has reported no evidence of exploitation in the wild but strongly advises users to upgrade to the fixed versions 12.4.3-03670 and 12.5.0-03082. The affected models include SMA 6210, 7210, and 8200v running older software versions. Other vulnerabilities disclosed include CVE-2026-102256 (OS command injection), CVE-2026-102257 (Zip Slip), and CVE-2026-102258 (stored XSS), which require authentication to exploit. This incident marks the third time this year SonicWall has patched a critical SSRF flaw in its appliances. 38 sources 61

Extracted Entities

CVEs (1)

CVE-2026-102255

Platforms (1)

SonicWall SMA