Critical SonicWall Vulnerability Exploited Days After Disclosure

Summary

A critical pre-authenticated SSRF vulnerability, identified as CVE-2026-102255, has been actively exploited just days after its disclosure. This flaw in SonicWall products could allow attackers to conduct unauthorized operations.

IFF Assessment

FOE

The active exploitation of a critical vulnerability in a widely used security product poses a direct threat to defenders.

Severity

10.0 Critical

Defender Context

Defenders must prioritize patching or mitigating this SonicWall vulnerability immediately, as it is being actively exploited. Organizations should monitor their networks for signs of compromise related to SSRF attacks and unauthorized operations.

Read Full Story →