HackerFeeds

CyberSecurity News

Critical SonicWall Vulnerability Exploited Days After Disclosure

SecurityWeek
· October 12, 2026
Vulnerabilities

AI summary

A critical vulnerability in SonicWall, identified as CVE-2026-102255, has been exploited just days after its disclosure. This flaw is a pre-authenticated server-side request forgery issue that enables attackers to carry out unauthorized operations.

Vulnerabilities mentioned

CVE-2026-102255
CRITICAL
CVSS 10

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

Read the full article at SecurityWeekwww.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.