CVE-2026-102256 – SonicWall SMA1000
“When the front door of remote access opens to anyone without a key, every system behind it is already in reach.”
This SonicWall SMA1000 update fixes three vulnerabilities in the appliance's Work Place and Appliance Management Console interfaces. CVE-2026-102255 has a CVSS score of 10.0, Critical severity. It is a pre-authentication server-side request forgery flaw that lets a remote, unauthenticated attacker abuse an unintended access path to make the appliance send requests for them, reach internal functions, and perform unauthorized operations. Attackers are actively exploiting CVE-2026-102255.
CVE-2026-102256 has a CVSS score of 7.8, High severity. It is an OS command injection flaw that lets an authenticated administrator run arbitrary OS commands, which leads to remote code execution. CVE-2026-102257 has a CVSS score of 7.2, High severity. It is a Zip Slip flaw in the Appliance Management Console: a crafted archive can write files outside the intended directory, which leads to code execution. Together, these flaws give attackers a path from unauthenticated access to full control of the remote access gateway.
Key Details
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-78