NewsThe Hacker News2026-10-07 16:17 UTC

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that any of the four flaws is being

Other advisories

CVE-2026-102257high
SonicWall SMA1000: Mehrere Schwachstellen
CVE-2026-102258none
SonicWall SMA: Cross-Site-Scripting (XSS)
CVE-2026-102257none
SonicWall SMA: Verzeichnisaufloesung (Path Traversal)
CVE-2026-102256none
SonicWall SMA: Betriebssystem-Befehlsinjektion
CVE-2026-102255none
SonicWall SMA: Server-Side-Request-Forgery (SSRF)
CVE-2026-102258none
SonicWall SMA: Cross-Site-Scripting (XSS)
CVE-2026-102257none
SonicWall SMA: Verzeichnisaufloesung (Path Traversal)
CVE-2026-102256none
SonicWall SMA: Betriebssystem-Befehlsinjektion

Other news entries

Newsbleepingcomputer2026-10-09
Max severity SonicWall SMA1000 flaw now exploited in attacks
Newssecurityweek2026-10-08
SonicWall and Splunk Patch Critical Vulnerabilities
Vulnerabilitybsi-cert-bund-wid2026-10-08
SonicWall SMA1000: Mehrere Schwachstellen
Newscsoonline2026-10-08
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
Newsbleepingcomputer2026-10-07
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
Vulnerabilitybsi-cert-bund-wid2026-10-07
SonicWall SMA1000: Mehrere Schwachstellen
Newsncsc-nl2026-10-07
NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance
Newscert-fr2026-10-07
Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)

Source: https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html

More on SonicWall