importantSYS.SOURCE: The Hacker News• 2026-10-12T16:06:56+05:30

Critical SSRF Vulnerability in SonicWall SMA 1000 Exploited Post-Patch

#vulnerability #sonicwall #ssrf

A critical pre-authenticated server-side request forgery (SSRF) vulnerability (CVE-2026-102255, CVSS 10.0) in SonicWall SMA 1000 appliances is being actively exploited, with 135 attempts observed post-disclosure. The flaw allows remote attackers to manipulate the appliance into issuing requests on their behalf without authentication.

Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure.

The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their

Read original article

*** END OF TRANSMISSION ***

> FORMER PLAUD EXECUTIVE LAUNCHES AI APP AMBI WITH $26M FUNDING FOR CONTINUOUS BACKGROUND LISTENING > CYBERATTACK EXPLOITS SUPERMARKET REFRIGERATION SYSTEMS, CAUSING AUTOMATIC DEFROSTING ACROSS EUROPE > CITROEN REINTRODUCES ICONIC 2CV DESIGN AS ELECTRIC CITY CAR TO COMPETE IN EVOLVING MARKET > ENTERPRISE AI AGENT SECURITY RISKS AND PRIVACY CONCERNS > QGIS IMPLEMENTS STRICT POLICY BANNING AI-ASSISTED CONTRIBUTIONS > LEDGER INVESTIGATES UNAUTHORIZED HARDWARE IMPLANT IN CRYPTOBILIS-SOLD WALLETS LINKED TO FUND THEFT > CRITICAL SSRF VULNERABILITY IN SONICWALL SMA 1000 EXPLOITED POST-PATCH > DELOITTE ALLEGEDLY FALSIFIED DOCUMENTS TO FACILITATE TAX EVASION FOR ROMAN ABRAMOVICH > CRITICAL UNAUTHENTICATED RCE VULNERABILITY IN BRICKSFORGE WORDPRESS PLUGIN EXPLOITED > SUSPICIOUS CODE DISCOVERY IN ZOD 4.6.6 COMMIT> FORMER PLAUD EXECUTIVE LAUNCHES AI APP AMBI WITH $26M FUNDING FOR CONTINUOUS BACKGROUND LISTENING > CYBERATTACK EXPLOITS SUPERMARKET REFRIGERATION SYSTEMS, CAUSING AUTOMATIC DEFROSTING ACROSS EUROPE > CITROEN REINTRODUCES ICONIC 2CV DESIGN AS ELECTRIC CITY CAR TO COMPETE IN EVOLVING MARKET > ENTERPRISE AI AGENT SECURITY RISKS AND PRIVACY CONCERNS > QGIS IMPLEMENTS STRICT POLICY BANNING AI-ASSISTED CONTRIBUTIONS > LEDGER INVESTIGATES UNAUTHORIZED HARDWARE IMPLANT IN CRYPTOBILIS-SOLD WALLETS LINKED TO FUND THEFT > CRITICAL SSRF VULNERABILITY IN SONICWALL SMA 1000 EXPLOITED POST-PATCH > DELOITTE ALLEGEDLY FALSIFIED DOCUMENTS TO FACILITATE TAX EVASION FOR ROMAN ABRAMOVICH > CRITICAL UNAUTHENTICATED RCE VULNERABILITY IN BRICKSFORGE WORDPRESS PLUGIN EXPLOITED > SUSPICIOUS CODE DISCOVERY IN ZOD 4.6.6 COMMIT