CVE-2026-102256Vulnerability
Reported by 5 independent sources · first reported by CERT-FR · last reported
Last reported 13 days ago
higher than 41% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)“CVE-2026-102256”
-
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances“CVE-2026-102256, rated CVSS 7.8, is an OS command injection flaw that could allow an authenticated administrator to execute arbitrary commands on the appliance.”
-
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances“CVE-2026-102256”
-
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)“CVE-2026-102255 and CVE-2026-102256, a post-authentication OS command injection flaw, were reported by Benoît Sevens.”
-
Múltiples vulnerabilidades en SMA 1000 de SonicWall“Para las vulnerabilidades de severidad alta se han asignado los identificadores CVE-2026-102256 y CVE-2026-102257.”
-
Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)“Référence CVE CVE-2026-102256”
Indicators reported together
named in the same reports- hxxps://psirt.global.sonicwall[.]com/vuln-detail/SNWLID-2026-0017in 2 reports
- hxxps://docs.gitlab[.]com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/in 1 report
- hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.htmlin 1 report
- hxxps://www.veeam[.]com/kb4934in 1 report
- hxxps://www.mozilla[.]org/en-US/security/advisories/mfsa2026-104/in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-102255, CVE-2026-102257, CVE-2026-102258, CVE-2026-83548, CVE-2026-15409, CVE-2026-83549, CVE-2026-15410, CVE-2026-90970, CVE-2026-21589, CVE-2026-76742, CVE-2026-76743, CVE-2026-79801, CVE-2026-79805, CVE-2025-64393, CVE-2026-106016
Thanks — we review every report.