Skip to content
Threat Feed
Subscribe
high threat exploited

Multiple Vulnerabilities in SonicWall Secure Mobile Access

Multiple vulnerabilities, including RCE, SSRF, and XSS, affect SonicWall SMA 1000 series appliances, posing significant risks if chained to bypass authentication.

CVE search metadata

CVE search record: CVE-2026-102255. Severity: critical. CVSS: 10.0. KEV: no. Brief: Multiple Vulnerabilities in SonicWall Secure Mobile Access. Brief link: https://feed.craftedsignal.io/briefs/2026-10-sonicwall-sma-vulnerabilities/

CVE search record: CVE-2026-102256. Severity: high. CVSS: 7.8. KEV: no. Brief: Multiple Vulnerabilities in SonicWall Secure Mobile Access. Brief link: https://feed.craftedsignal.io/briefs/2026-10-sonicwall-sma-vulnerabilities/

CVE search record: CVE-2026-102257. Severity: high. CVSS: 7.2. KEV: no. Brief: Multiple Vulnerabilities in SonicWall Secure Mobile Access. Brief link: https://feed.craftedsignal.io/briefs/2026-10-sonicwall-sma-vulnerabilities/

CVE search record: CVE-2026-102258. Severity: medium. CVSS: 6.1. KEV: no. Brief: Multiple Vulnerabilities in SonicWall Secure Mobile Access. Brief link: https://feed.craftedsignal.io/briefs/2026-10-sonicwall-sma-vulnerabilities/

The French National Cybersecurity Agency (ANSSI/CERT-FR) has issued an advisory regarding multiple critical vulnerabilities discovered in SonicWall Secure Mobile Access (SMA) 1000 series appliances. The flaws include Remote Code Execution (RCE), Server-Side Request Forgery (SSRF), and Cross-Site Scripting (XSS). These vulnerabilities are tracked under CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, and CVE-2026-102258.

While the vendor has not reported active exploitation for these specific identifiers as of October 7, 2026, the CERT-FR highlights a recurring pattern of exploitation on these platforms. Attackers have previously chained SSRF vulnerabilities to bypass authentication mechanisms, subsequently leveraging RCE vulnerabilities to gain unauthorized control of the appliances