SonicWall SMA1000 Workplace Pre-Authentication Server-Side Request Forgery Scores 10.0 CVSS Without Requiring Credentials

Last refreshed2026-10-10

Status: UPDATED | Advisory ID: CVE-2026-102255

Key Details

CVE	CVE-2026-102255
CVSS Score / Version	10.0 (Critical) / CVSS v3.1
Updated	2026-10-07
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	SonicWall SMA1000
Classified as	CWE-441 (Unintended Proxy or Intermediary ('Confused Deputy'))

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
SonicWall	SMA1000

Vendor

Product

Affected Versions

Patch Status

SonicWall

SMA1000

Subsystems	General OT
Sectors	Multiple

What to Know

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations. (NVD)

What to Do

Monitor SonicWall's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-102255
CVE	https://www.cve.org/CVERecord?id=CVE-2026-102255

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-102255

CVE