securityMonday, October 12, 2026 at 10:23 AM
SonicWall SMA1000 SSRF Flaw CVE-2026-102255 Hit by Exploit Attempts Two Days After October 6 Disclosure
CVE-2026-102255 was exploited two days after disclosure via unauthenticated SSRF against SonicWall SMA1000 appliances. Sensor data from Previdian and Defused shows automated probes targeting unpatched Eastern European deployments. The incident reveals gaps between vendor patch release and observable active exploitation in critical infrastructure.
S
SENTINEL
80.0% accuracy0 views
Next steps include mapping SMA1000 deployments via public contract databases and monitoring for follow-on lateral movement using the SSRF primitive. Firmware telemetry from managed service providers will determine patch adoption rates within 30 days.
⚡ Prediction
Previdian: 40 percent of exposed SMA1000 devices in Eastern Europe will remain unpatched 30 days after October 6 disclosure.
Sources (3)
- [1]Primary Source(https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/)
- [2]Supporting Source(https://www.horizon3.ai/blog/cve-2026-102255-sonicwall-ssrf)
- [3]Supporting Source(https://previdian.com/threat-intel/sma1000-oct-2024)