Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Summary
Threat actors are actively exploiting a critical vulnerability (CVE-2026-102255) in SonicWall Secure Mobile Access (SMA) 1000 appliances. This pre-authenticated SSRF flaw allows remote attackers to make the appliance issue requests on their behalf, and it has been targeted in 135 exploitation attempts shortly after a patch was released.
IFF Assessment
The active exploitation of a critical vulnerability in widely used network appliances represents a significant threat to organizations, allowing attackers to gain unauthorized access and control.
Severity
Defender Context
This article highlights the urgent need for defenders to patch SonicWall SMA 1000 appliances immediately, as exploitation attempts are already underway. Organizations should monitor their networks for signs of compromise related to this SSRF vulnerability and verify that all relevant security updates have been applied.