SMA1000

Critical SSRF Vulnerability Affects SonicWall SMA1000 Series Remote Access Appliances

SonicWall has disclosed four vulnerabilities in its SMA1000 series remote access products, with one rated critical. The most severe issue, CVE-2026-102255, is a server-side request forgery flaw in the WorkPlace interface that allows unauthenticated attackers to abuse the appliance as a forward proxy and reach internal functions. The vulnerability received the maximum CVSSv3.0 base score of 10.0. Two additional flaws, CVE-2026-102256 and CVE-2026-102257, enable authenticated OS command injection and unauthenticated path traversal via crafted archives, respectively. No exploitation has been observed in the wild at the time of disclosure. SonicWall has released updates to address all issues.

SonicWall Issues Emergency Hotfixes After Detecting Active Exploitation of Two Zero-Day Vulnerabilities in SMA1000 Appliances

SonicWall has confirmed active exploitation of two zero-day vulnerabilities in its SMA1000 series appliances, prompting the immediate release of hotfixes and a strict compliance deadline for U.S. federal agencies. The first flaw, CVE-2026-15409, carries a critical CVSS score of 10.0 and allows unauthenticated server-side request forgery (SSRF) through the Appliance Work Place interface, enabling attackers to force the device to make unauthorized requests to internal services. The second vulnerability, CVE-2026-15410, rated CVSS 7.2, permits authenticated code injection via the Appliance Management Console, allowing administrators to execute operating system commands. Affected models include SMA6210, SMA7210, and SMA8200v running specific vulnerable platform versions such as 12.4.3-03245 through 12.5.0-02800. CISA has added both CVEs to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch or decommission impacted systems by July 17, 2026. Indicators of compromise and recommended response actions, including log analysis and potential appliance reimaging, have been published to help organizations detect and mitigate potential intrusions.