Description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA1000 | 12.4.3-03526 (platform-hotfix) and older versions, 12.5.0-02952 (platform-hotfix) and older versions | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
CompleteTech-Security/sonicwall-sma1000-cve-2026-102255-check ★ 0 · Oct 23, 2026
Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
-
HORKimhab/CVE-2026-102255 ★ 0 · Oct 12, 2026
CVE-2026-102255 - Draft or TODO
-
techupdate24/sonicwall-sma-1000-cve-2026-102255 ★ 0 · Oct 12, 2026
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2026-3757 SonicWall SMA1000: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
- NCSC-2026-0403 Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance NCSC-NL (Netherlands) · Oct 7, 2026
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 vendor-advisory