{"vulnerability": "CVE-2026-102255", "sightings": [{"uuid": "a14a1179-f5b5-4c2a-9a95-aa2a3cc0a723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7xhzthmo23", "content": "SonicWall SMA1000 vulnerability CVE-2026-102255 (CVSS 10) allows pre-auth SSRF. Three more flaws fixed. Upgrade to 12.5.0-03082 now.\n\n#SonicWall #SMA1000 #CVE2026102255 #CVE2026102256 #SSRF #RemoteAccess #VPN #Vulnerability", "creation_timestamp": "2026-10-06T17:30:49.331394Z"}, {"uuid": "395e64f4-82e7-4ab8-85b6-d4470749cf40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117395659415580261", "content": "new SonicWall SMA1000 advisory. Check out CVE-2026-102255 (10.0 critical) Pre-authentication SSRF via unintended forward-proxy. No mention of exploitation, but it's not a good look that your Secure Mobile Access is not secure (including four known exploited vulnerabilities in the past 90 days)\nhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017\n#sonicwall #sma1000 #cve", "creation_timestamp": "2026-10-06T19:40:24.062470Z"}, {"uuid": "c31e8983-0fb2-4e8b-87dd-545081959368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbg3tq3xt2q", "content": "SonicWall SMA1000 Vulnerability CVE-2026-102255: Critical Pre-Auth SSRF Flaw\n\uff08SonicWall SMA1000\u306bCVSS 10.0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u5185\u90e8\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\uff09 #SecurityOnline (Oct 7)\nsecurityonline.info/sonicwall-sm...", "creation_timestamp": "2026-10-07T07:25:07.193866Z"}, {"uuid": "f726d338-715a-4ec8-a8ff-283dffcd1fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbg5enp7r2v", "content": "SonicWall SMA1000 Vulnerability CVE-2026-102255: Critical Pre-Auth SSRF Flaw\n\uff08SonicWall SMA1000\u306bCVSS 10.0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u5185\u90e8\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\uff09 #SecurityOnline (Oct 7)\nsecurityonline.info/sonicwall-sm...", "creation_timestamp": "2026-10-07T07:25:57.685455Z"}, {"uuid": "41d69f6a-4bc4-4e5f-9bfb-c311377050fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mxbrbdv7dk2m", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/10/07/s...\n\n#cybersecurity #cybersecuritynews #enterprise #MSP #securityupdate #vulnerability", "creation_timestamp": "2026-10-07T10:45:04.289870Z"}, {"uuid": "c955df83-cfd5-4e0b-9eaa-b67496e4e14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxbsinujb22r", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\nwww.helpnetsecurity.com/2026/10/07/s...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-07T11:07:02.335124Z"}, {"uuid": "62a1d6d1-1092-4546-a0ee-27da76632255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117399415684837516", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\nSonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, including CVE-2026-102255, which could let remote unauthenticated attackers direct the appliance to issue requests on their behalf and perform unauthorized operations. The vendor says there is currently no evidence of in-the-wild exploitation, but attackers' track record with similar flaws suggests it could come soon. https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/", "creation_timestamp": "2026-10-07T11:35:22.615166Z"}, {"uuid": "baedc11e-73a5-43aa-8664-b274607a6632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxbu3dblh22j", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\nSonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, including CVE-2026-102255, which could let rem... https://threatintel.cc/2026/10/07/sonicwall-fixes-preauth-ssrf-flaw.html", "creation_timestamp": "2026-10-07T11:35:22.670661Z"}, {"uuid": "4a4c39f4-9e8a-4a97-9227-0340e2ea4925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117399734917247848", "content": "Tracked as CVE-2026-102255, the vulnerability was found in the Appliance WorkPlace interface of SMA1000 6210, 7210, and 8200v models, but it does not affect the SMA 100 Series product line or SSL-VPN running on SonicWall firewalls. https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-max-severity-ssrf-flaw-in-sma1000-gateways/", "creation_timestamp": "2026-10-07T12:56:34.485193Z"}, {"uuid": "221de583-7f2d-49cf-8175-afb68d51913b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxbyn7dwx22g", "content": "Tracked as CVE-2026-102255, the vulnerability was found in the Appliance WorkPlace interface of SMA1000 6210, 7210, and 8200v models, but it does not affect the SMA 100 Series product line or SSL-VPN running on SonicWall firewalls. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-10-07T12:56:54.778709Z"}, {"uuid": "f40548f4-2dad-4de2-b114-9943f8c50a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxc3vxovnb23", "content": "\ud83d\udd17 CVE : CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-102258", "creation_timestamp": "2026-10-07T13:55:31.470385Z"}, {"uuid": "b2b0ae0a-79c3-436d-b8ac-7aec10071233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxc4wlaika2g", "content": "\ud83d\udcf0 SonicWall Peringatkan Celah SSRF Kritis CVE-2026-102255 pada SMA1000\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/07/sonicwall-sma1000-cve-2026-102255-ssrf/\n\n#cisa #cybersecurity #keamananSiber #ransomware #sonicwall #vulnerability #zero-day", "creation_timestamp": "2026-10-07T14:13:45.604072Z"}, {"uuid": "0c7609ea-e2a6-42b4-a020-dc008d0099e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10269", "content": "\u26a0\ufe0f SonicWall has patched a CVSS 10.0 WorkPlace SSRF that requires no login.\n\nCVE-2026-102255 can reach internal functions before authentication. SonicWall says it has no evidence of exploitation.\n\nRead - https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T16:25:04.000000Z"}, {"uuid": "486fe783-f9d9-420f-b079-6a4336ec3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxcjxtw45q2x", "content": "\ud83d\udea8 CVE-2026-102255 \u2014 CVSS 10 CRITICAL\n\nA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102255\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:07:06.806070Z"}, {"uuid": "600417dc-18a6-4d41-bed8-9f75abd82cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117401083449675096", "content": "Chat, is it bad if your zero-trust VPN device forwards network requests without auth? Asking for thousands of friends.\nSonicWall SMA1000 devices have a SSRF vulnerability that needs patching.\nhttps://ifin.network/t/cve-2026-102255-pre-auth-ssrf-in-sonicwall-sma1000-devices/889\n#IFIN #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-07T18:39:52.218143Z"}, {"uuid": "907e99bc-9379-4592-b3a6-cebabcd0deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-17261912-59c25ab57dc2c25a", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could [\u2026]SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances", "creation_timestamp": "2026-10-07T18:56:01.537614Z"}, {"uuid": "62f488aa-ef38-464e-bb20-c4066726e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxcmphgj7c52", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score [\u2026]", "creation_timestamp": "2026-10-07T18:56:14.064886Z"}, {"uuid": "65594e02-2f94-42de-b0b0-001920a0be65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxcnxeldar2j", "content": "SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that allows remote unauthenticated attackers to issue requests on behalf of the appliance.", "creation_timestamp": "2026-10-07T19:18:26.033831Z"}]}