CVE-2026-102257Vulnerability

1. “CVE-2026-102257”

   CERT-FRGovernment12 Oct 2026
   Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)

2. “CVE-2026-102257, rated 7.2, is a Zip Slip vulnerability in the Appliance Management Console that could let an administrator extract files outside the intended directory and achieve remote code execution.”

   Security AffairsNews7 Oct 2026
   SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances

3. “CVE-2026-102257”

   The Hacker NewsNews7 Oct 2026
   SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

4. “CVE-2026-102257 and CVE-2026-102258 – a path traversal and a cross-site scripting flaw in the appliances’ Appliance Management Console, respectively – are exploitable only if the attacker is authenticated as administrator.”

   Help Net SecurityNews7 Oct 2026
   SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

5. “Para las vulnerabilidades de severidad alta se han asignado los identificadores CVE-2026-102256 y CVE-2026-102257.”

   INCIBE-CERTGovernment7 Oct 2026
   Múltiples vulnerabilidades en SMA 1000 de SonicWall

6. “Référence CVE CVE-2026-102257”

   CERT-FRGovernment7 Oct 2026
   Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)

• hxxps://psirt.global.sonicwall[.]com/vuln-detail/SNWLID-2026-0017in 2 reports
• hxxps://docs.gitlab[.]com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/in 1 report
• hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.htmlin 1 report
• hxxps://www.veeam[.]com/kb4934in 1 report
• hxxps://www.mozilla[.]org/en-US/security/advisories/mfsa2026-104/in 1 report

Also named with it: CVE-2026-102255, CVE-2026-102256, CVE-2026-102258, CVE-2026-83548, CVE-2026-15409, CVE-2026-83549, CVE-2026-15410, CVE-2026-90970, CVE-2026-21589, CVE-2026-76742, CVE-2026-76743, CVE-2026-79801, CVE-2026-79805, CVE-2025-64393, CVE-2026-106016