Max severity SonicWall SMA1000 flaw now exploited in attacks

CVE v události 4

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.

Tahle CVE jsem vytáhl z širšího textu článku: CVE-2026-15409, CVE-2026-15410, CVE-2026-83548, CVE-2026-83549. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.

Jak se o tom psalo 7

1. 9. 10. 2026 14:32 · BleepingComputer US nadpis události

   Max severity SonicWall SMA1000 flaw now exploited in attacks

   Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. [...]

2. 7. 10. 2026 21:07 · Cyber Centre Kanada CA

   SonicWall security advisory (AV26-1017)

   Serial number: AV26-1017 Date: October 7, 2026 As of October 6, 2026, SonicWall is affected by vulnerabilities in the following product: SMA1000 Models - 6210, 7210, 8200v Version 12.4.3-03670 (platform-hotfix) and prior Version 12.5.0-03082 (platform-hotfix) and prior The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities SonicWall…

3. 7. 10. 2026 13:37 · BleepingComputer US

   SonicWall warns of max severity SSRF flaw in SMA1000 gateways

   SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. [...]

4. 7. 10. 2026 10:39 · CSIRT Itálie (ACN) IT

   Risolte vulnerabilità in prodotti SonicWall

   SonicWall ha rilasciato aggiornamenti di sicurezza per sanare 4 vulnerabilità, di cui 1 con gravità "critica" e 2 con gravità "alta", che interessano i modelli 6210, 7210 e 8200v appartenenti alla serie SMA1000. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eludere dei meccanismi di sicurezza e di eseguire codice arbitrario sui sistemi interessati.

5. 7. 10. 2026 08:20 · NCSC-NL NL

   NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance

   SonicWall heeft meerdere kwetsbaarheden verholpen in de SonicWall SMA1000 Appliance. De kwetsbaarheden omvatten een pre-authenticatie Server-Side Request Forgery (SSRF) die ongeauthenticeerde aanvallers in staat stelt om onbevoegde interne verzoeken uit te voeren. Daarnaast is er een post-authenticatie remote code execution kwetsbaarheid via OS command injection. Verder is er een Zip Slip kwetsbaarheid in de management console die het mogelijk maakt om bestanden buiten de bedoelde directories…

6. 7. 10. 2026 · zachyceno 04:00 · NCSC-FI FI

   SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.0: 10.0, CVEs: CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-102258, Summary: 1) CVE-2026-102255 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to…

7. 7. 10. 2026 · zachyceno 16:00 · CERT-FR – avis FR

   Multiples vulnérabilités dans Sonicwall Secure Mobile Access (07 octobre 2026)

   De multiples vulnérabilités ont été découvertes dans Sonicwall Secure Mobile Access. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une falsification de requêtes côté serveur (SSRF) et une injection de code indirecte à distance (XSS)....