SonicWall has released hotfixes addressing a maximum-severity server-side request forgery (SSRF) flaw, CVE-2026-102255, in its SMA1000 series appliances. The vulnerability, affecting models 6210, 7210, and 8200v running versions 12.4.3-03526 and 12.5.0-02952, allows attackers to bypass authentication and potentially reach internal functions. This marks the third time this year SonicWall has fixed a 10.0-rated SSRF flaw in its WorkPlace portal. The company reports no evidence of active exploitation of the new flaw, but urges users to update to versions 12.4.3-03670 or 12.5.0-03082.
The vulnerability stems from an unintended access path within the WorkPlace portal, which provides remote access to company networks and applications. Benoît Sevens of Anthropic and Brian Mariani of DigitalCanion SA, through Trend Micro’s Zero Day Initiative, identified the flaw. SonicWall previously addressed similar SSRF vulnerabilities, CVE-2026-15409 and CVE-2026-15410 in July, and CVE-2026-83548 and CVE-2026-83549 in September, and investigated reports of exploitation in both instances, finding “multiple cases” in July and “a case” in September.
In addition to the critical SSRF flaw, SonicWall also patched three other vulnerabilities in the SMA1000 appliances, all requiring login to exploit. These affect the Appliance Management Console (AMC), where administrators configure the appliance. The hotfix installation requires a system restart, and no workaround is currently available. SSL-VPN on SonicWall firewalls and the SMA 100 Series are not affected by these vulnerabilities.
Read the original coverage
💬 Comments
📜 Comment Policy