CVE-2026-102255

10.0 Critique

Publiée le 07/10/2026 à 15:17 · Modifiée le 07/10/2026 à 18:17 · En attente d'analyse NVD · Source : PSIRT@sonicwall.com

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Traduire en français

Produits concernés

SonicWall SMA1000

Scores CVSS

Version	Score	Source	Vecteur
3.1	10.0 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-441
CWE-918

Références

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories