Skip to content

CVE

CVE-2026-102255

10.0
CVSS 3.1
1
story
Severity
10.0 Critical · vendor score
Published
Oct 7, 2026
Weakness
CWE-441, CWE-918

What it is

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesSonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)SonicWall warns that attackers are exploiting a high-severity SonicOS SSL VPN authentication bypass flaw (CVE-2026-19868) that can circumvent SAML-enforced MFA.LINDSEY O'DONNELL-WELCH · 1 MIN

Official references

2 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record