https://vulnerability.circl.lu/sightings/feed 2026-10-08T04:11:36.642921+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6d37473c-e1d4-44b1-8bf1-d4c01ccb115f/export 2026-10-08T04:11:36.671875+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6d37473c-e1d4-44b1-8bf1-d4c01ccb115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdchbm4fx2k", "content": "SonicWall\u3001SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8a8d\u8a3c\u524dSSRF\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff08CVE-2026-102255\uff09\n\nSonicWall\u306f\u3001\u4e3b\u529b\u306e\u30bb\u30ad\u30e5\u30a2\u30e2\u30d0\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\uff08SMA\uff091000\u30b7\u30ea\u30fc\u30ba\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5b58\u5728\u3059\u308b4\u4ef6\u306e\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u3046\u3061\u306e1\u4ef6\uff08CVE-2026-102255\uff09\u306f\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u300c\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u81ea\u5206\u306e\u4ee3\u308f\u308a\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u767a\u884c\u3055\u305b\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u5230\u9054\u3057\u3066\u4e0d\u6b63", "creation_timestamp": "2026-10-08T01:25:14.217161Z"} 2026-10-08T01:25:14.217161+00:00 https://vulnerability.circl.lu/sighting/0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd/export 2026-10-08T04:11:36.674113+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdaifpdqn2r", "content": "CVE-2026-102255 - sma1000\nThe SMA1000 appliance\u2019s Workplace interface allows outsiders to send the device its own network requests without logging in. This could let an attacker reach hidden internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sma1000 #sonicwall #CVE #infosec", "creation_timestamp": "2026-10-08T00:50:04.676566Z"} 2026-10-08T00:50:04.676566+00:00 https://vulnerability.circl.lu/sighting/2850bce6-5f26-4690-a8c1-1b2829814956/export 2026-10-08T04:11:36.674242+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2850bce6-5f26-4690-a8c1-1b2829814956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxd5xxc4gt25", "content": "\ud83d\udea8 Rapid Response: SonicWall patched a critical CVSS 10.0 pre-auth SSRF in SMA1000 (CVE-2026-102255).\n\nCensys detects 5,966 Internet-exposed hosts and 39,310 web properties running SMA1000/Secure Mobile Access, excluding honeypots. \n\nCensys ARC advisory: https://bit.ly/3VWfWJc \n", "creation_timestamp": "2026-10-08T00:05:06.519437Z"} 2026-10-08T00:05:06.519437+00:00 https://vulnerability.circl.lu/sighting/64f077b5-e8a9-4b3c-a9e3-b51e10e97331/export 2026-10-08T04:11:36.674328+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "64f077b5-e8a9-4b3c-a9e3-b51e10e97331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxd4psp4tr2p", "content": "\ud83e\udd16 SonicWall SMA1000 hotfixes: critical pre-auth SSRF CVE-2026-102255 (CVSS 10.0) in the WorkPlace portal lets unauthenticated attackers reach internal functions. 3 more flaws (CVSS \u22647.8 RCE) need admin login.\nhttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T23:42:37.968913Z"} 2026-10-07T23:42:37.968913+00:00 https://vulnerability.circl.lu/sighting/f292692a-0920-433f-a93e-cad7b3214a9a/export 2026-10-08T04:11:36.674420+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f292692a-0920-433f-a93e-cad7b3214a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxcskkfwkj2j", "content": "SMA1000 Appliance Work Place\u306b\u8a8d\u8a3c\u306a\u3057SSRF\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u672c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u30a2\u30af\u30bb\u30b9\u3055\u305b\u3001\u4e0d\u6b63\u64cd\u4f5c\u3092\u884c\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-102255 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-10-07T20:40:43.995468Z"} 2026-10-07T20:40:43.995468+00:00 https://vulnerability.circl.lu/sighting/e391408f-f036-4c97-949c-4f9698acb219/export 2026-10-08T04:11:36.674499+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e391408f-f036-4c97-949c-4f9698acb219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mxcrgjfdkg2y", "content": "SonicWall patched a critical CVSS 10 SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions, with no evidence of exploitation.\n\nCVE-2026-102255 #Flaw #Patch #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-07T20:20:36.007536Z"} 2026-10-07T20:20:36.007536+00:00 https://vulnerability.circl.lu/sighting/65594e02-2f94-42de-b0b0-001920a0be65/export 2026-10-08T04:11:36.674576+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "65594e02-2f94-42de-b0b0-001920a0be65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxcnxeldar2j", "content": "SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that allows remote unauthenticated attackers to issue requests on behalf of the appliance.", "creation_timestamp": "2026-10-07T19:18:26.033831Z"} 2026-10-07T19:18:26.033831+00:00 https://vulnerability.circl.lu/sighting/62f488aa-ef38-464e-bb20-c4066726e873/export 2026-10-08T04:11:36.674647+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "62f488aa-ef38-464e-bb20-c4066726e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxcmphgj7c52", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score [\u2026]", "creation_timestamp": "2026-10-07T18:56:14.064886Z"} 2026-10-07T18:56:14.064886+00:00 https://vulnerability.circl.lu/sighting/907e99bc-9379-4592-b3a6-cebabcd0deb4/export 2026-10-08T04:11:36.674725+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "907e99bc-9379-4592-b3a6-cebabcd0deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-17261912-59c25ab57dc2c25a", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could [\u2026]SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances", "creation_timestamp": "2026-10-07T18:56:01.537614Z"} 2026-10-07T18:56:01.537614+00:00 https://vulnerability.circl.lu/sighting/600417dc-18a6-4d41-bed8-9f75abd82cad/export 2026-10-08T04:11:36.674799+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "600417dc-18a6-4d41-bed8-9f75abd82cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117401083449675096", "content": "Chat, is it bad if your zero-trust VPN device forwards network requests without auth? Asking for thousands of friends.\nSonicWall SMA1000 devices have a SSRF vulnerability that needs patching.\nhttps://ifin.network/t/cve-2026-102255-pre-auth-ssrf-in-sonicwall-sma1000-devices/889\n#IFIN #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-07T18:39:52.218143Z"} 2026-10-07T18:39:52.218143+00:00