CVE-2026-102255Vulnerability

1. “…26-21589 (Atlassian), CVE-2026-93355 (LiteLLM), CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, CVE-2026-106347 (Google Chrome), CVE-2026-102255 (SonicWall SMA 1000), CVE-2026-105192 (LMCache), CVE-2026-102406, CVE-2026-103008, CVE-2026-102404, CVE-2026-102413 (Elasticsearch),…”

   The Hacker NewsNews12 Oct 2026
   ⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

2. “Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure.”

   Security AffairsNews12 Oct 2026
   SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

3. “CVE-2026-102255: Critical SonicWall SMA1000 SSRF”

   SOCRadarVendor12 Oct 2026
   CVE-2026-102255: Critical SonicWall SMA1000 SSRF

4. “The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthori…”

   The Hacker NewsNews12 Oct 2026
   Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

5. “Tracked as CVE-2026-102255 (CVSS score of 10), the security defect is described as a pre-authenticated server-side request forgery (SSRF) issue affecting the SMA1000 Work Place interface.”

   SecurityWeekNews12 Oct 2026
   Critical SonicWall Vulnerability Exploited Days After Disclosure

6. “CVE-2026-102255”

   CERT-FRGovernment12 Oct 2026
   Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)

7. “SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)”

   Help Net SecurityNews11 Oct 2026
   Week in review: FortiBleed is still active, Patch Tuesday forecast

8. “The most severe of the issues, tracked as CVE-2026-102255 (CVSS score of 10), is a pre-authenticated SSRF bug that exists due to an unintended alternate access path.”

   SecurityWeekNews8 Oct 2026
   SonicWall and Splunk Patch Critical Vulnerabilities

9. “SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0.”

   Security AffairsNews7 Oct 2026
   SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances

10. “The most serious flaw, tracked as CVE-2026-102255, is a server-side request forgery (SSRF) bug in WorkPlace, the portal that SMA1000 users log in to.”

    The Hacker NewsNews7 Oct 2026
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

11. “SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)”

    Help Net SecurityNews7 Oct 2026
    SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

12. “CVE-2026-102255: vulnerabilidad Server-Side Request Forgery (SSRF) previa a la autenticación en el portal WorkPlace de SMA 1000.”

    INCIBE-CERTGovernment7 Oct 2026
    Múltiples vulnerabilidades en SMA 1000 de SonicWall

13. “Référence CVE CVE-2026-102255”

    CERT-FRGovernment7 Oct 2026
    Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)

• hxxps://psirt.global.sonicwall[.]com/vuln-detail/SNWLID-2026-0017in 2 reports
• fbijobs[.]govin 1 report

Also named with it: CVE-2026-102256, CVE-2026-102257, CVE-2026-102258, CVE-2026-15409, CVE-2026-83548, CVE-2026-21589, CVE-2026-15410, CVE-2026-83549, CVE-2026-96940, CVE-2026-86360, CVE-2025-64393, CVE-2026-47483, CVE-2026-104711, CVE-2026-102489, CVE-2026-102490, CVE-2026-90970, CVE-2026-88779, CVE-2026-59265