SonicWall has released hotfixes for a critical flaw in SMA1000 remote-access gateways that could let an unauthenticated attacker make the device send requests and reach internal functions. The issue, CVE-2026-102255, is a server-side request forgery flaw in the Appliance WorkPlace interface affecting SMA1000 6210, 7210, and 8200v appliances. SonicWall says SMA 100 Series devices and SSL-VPN on SonicWall firewalls are not affected, and says it has no evidence of active exploitation so far.
Why it matters: These appliances sit at the edge of corporate and government networks, so a critical bug can become an easy entry point if left exposed. Organizations using affected SMA1000 models should apply the hotfixes immediately and verify any internet-facing appliances are updated.
Sergiu Gatlan
2026.10.07
100% relevant
This article establishes a distinct new event: SonicWall's disclosure and patching of CVE-2026-102255 in SMA1000 appliances, which is separate from the previously tracked actively exploited SMA1000 zero-days and other SonicWall flaws.
← Back to all stories