Description
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SonicWall | SMA1000 | 12.4.3-03526 (platform-hotfix) and older versions, 12.5.0-02952 (platform-hotfix) and older versions | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
CompleteTech-Security/sonicwall-sma1000-cve-2026-102258-check ★ 0 · Oct 23, 2026
Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2026-3757 SonicWall SMA1000: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 4, 2026
- NCSC-2026-0403 Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance NCSC-NL (Netherlands) · Oct 7, 2026
References
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 vendor-advisory