CVE-2026-102255
CRITICAL 10A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
VulnCheck KEV reports exploitation for this CVE. These are source-specific reports; review the details and vendor guidance below.
Exploitation likelihood
1.0%chance of exploitation in 30 days · 62nd percentile
Impact if exploited
10CVSS 3.1 · CRITICAL
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityHigh
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-918: Server-Side request forgery (SSRF)
- CWE-441: Unintended Proxy or Intermediary ('Confused Deputy')
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References and research data (JSON)
Unverified PoC candidates
Catalogue matches for further research. These repositories have not been validated as working exploits.
3 candidates
- https://github.com/HORKimhab/CVE-2026-102255
CVE-2026-102255 - Draft or TODO
PoC-in-GitHub · CVE-2026-102255
PoC-in-GitHub · CVE-2026-102255 · Updated 2026-10-12T13:43:18Z - https://github.com/techupdate24/sonicwall-sma-1000-cve-2026-102255
A complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.
PoC-in-GitHub · CVE-2026-102255
PoC-in-GitHub · CVE-2026-102255 · Updated 2026-10-12T17:22:39Z - https://github.com/CompleTetech-Security/sonicwall-sma1000-cve-2026-102255-check
Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON/CSV/HTML reports; no exploit payloads.
PoC-in-GitHub · CVE-2026-102255
PoC-in-GitHub · CVE-2026-102255 · Updated 2026-10-26T05:07:03Z
Additional exploitation reports
Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.
- VulnCheck KEV · 2026-10-07T00:00:00Z
Source guidance: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Source ransomware assessment: Unknown
VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z - VulnCheck KEV · 2026-10-07T00:00:00ZVulnCheck KEV · CVE-2026-102255
- VulnCheck KEV · 2026-10-09T00:00:00ZVulnCheck KEV · CVE-2026-102255
VulnCheck KEV · CVE-2026-102255 - VulnCheck KEV · 2026-10-10T00:00:00ZVulnCheck KEV · CVE-2026-102255
All CVSS metrics
- CRITICAL 10 v3.1 · ADP Primary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CRITICAL 10 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
References
Advisories
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 CVE record · sonicwall · Updated 2026-10-07T13:07:13.384Z
NVD · CVE-2026-102255 · Updated 2026-10-07T16:17:32.440 - https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94324 EUVD · EUVD-2026-94324
- https://vulncheck.com/kev VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z
Technical & other
- https://ess.coalitioninc.com/cve/?id=CVE-2026-102255&alert=2026-10-09 VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z
- https://previdian.com/CVE-2026-102255 VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z
- https://x.com/DefusedCyber/status/2108543042693058984 VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z
- https://x.com/PrevidianCyber/status/2108481433010340097 VulnCheck KEV · CVE-2026-102255 · Updated 2026-10-07T00:00:00Z