Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #10

SonicWall scrambles to patch actively exploited VPN flaw

Original: SonicWall patched a max-severity flaw in its SMA1000 VPN gateways on Oct 6. Honeypots saw exploitation a day later. CVE-

SonicWall patched a maximum-severity vulnerability, CVE-2026-102255, in its SMA1000 VPN gateways on October 6. The flaw, a CVSS 10 pre-authentication SSRF with no workaround, was exploited in the wild just a day after the fix, as confirmed by honeypot detections. Security researchers are urging all organisations running SMA1000 appliances to apply the patch immediately, since exploitation requires no credentials and leaves unpatched devices wide open to attackers.

Why now: A CVSS 10 flaw in VPN appliances is being exploited within a day of the patch, creating urgent pressure on administrators to update.

SonicWallSMA1000CVE-2026-102255

Open on mastodon →

Evidence

• SonicWall patched a max-severity flaw in its SMA1000 VPN gateways on Oct 6. Honeypots saw exploitation a day later. CVE-2026-102255 is a CVSS 10 pre-auth SSRF. No workaround. Run SMA1000? Patch now. https:// suriq.io/blog/sonicwall-sma100 0-cve-2026-102255-preauth-ssrf # CVE #… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1962212