SonicWall SMA1000 CVE-2026-102255 pre-auth SSRF under attack

[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

exploitation reported, not on KEV2026-10-09

SonicWall SMA1000 CVE-2026-102255 pre-auth SSRF under attack

Pre-auth SSRF in the Work Place interface (advisory SNWLID-2026-0017). Upgrade to 12.4.3-03670 or 12.5.0-03082; note 12.5.0-02952, the September zero-day fix, is now listed as affected. Canada's Cyber Centre cites open-source reports of exploitation. Not in KEV as of Oct 13.

Sources: SonicWall PSIRT · CVE record · Cyber Centre AV26-1017