CVE-2026-102258Vulnerability
Reported by 4 independent sources · first reported by CERT-FR · last reported
Last reported 13 days ago
higher than 32% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
5 reports, newest first · the exact sentence from each-
Bulletin d'actualité CERTFR-2026-ACT-043 (12 octobre 2026)“CVE-2026-102258”
-
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances“CVE-2026-102258, rated 5.5, is a stored XSS flaw that could allow an authenticated administrator to store and execute malicious JavaScript in the management console.”
-
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances“CVE-2026-102258”
-
SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)“CVE-2026-102257 and CVE-2026-102258 – a path traversal and a cross-site scripting flaw in the appliances’ Appliance Management Console, respectively – are exploitable only if the attacker is authenticated as administrator.”
-
Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)“Référence CVE CVE-2026-102258”
Indicators reported together
named in the same reports- hxxps://psirt.global.sonicwall[.]com/vuln-detail/SNWLID-2026-0017in 2 reports
- hxxps://docs.gitlab[.]com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/in 1 report
- hxxps://confluence.atlassian[.]com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.htmlin 1 report
- hxxps://www.veeam[.]com/kb4934in 1 report
- hxxps://www.mozilla[.]org/en-US/security/advisories/mfsa2026-104/in 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-83548, CVE-2026-15409, CVE-2026-83549, CVE-2026-15410, CVE-2026-90970, CVE-2026-21589, CVE-2026-76742, CVE-2026-76743, CVE-2026-79801, CVE-2026-79805, CVE-2025-64393, CVE-2026-106016
Thanks — we review every report.