【Vulnerability Alert】SonicWall SMA1000 series products have critical security vulnerabilities (CVE-2026-102255)

• Subject: 【Vulnerability Alert】SonicWall SMA1000 series products have critical security vulnerabilities (CVE-2026-102255)

• Description:
  • Forwarding TWCERTCC Security Information Advisory TWCERTCC-200-202610-00000011
  • SonicWall has released a critical security vulnerability (CVE-2026-102255, CVSS: 10.0) for the SMA1000 series products. This is an unauthenticated SSRF vulnerability that exists in the SMA1000 series device work interface, allowing an unauthenticated remote attacker to send unexpected requests to access internal functions and perform unauthorized operations.
• Affected Platforms:
  • SMA 1000 series products versions 12.4.3-03526 (inclusive) and earlier, SMA 1000 series products versions 12.5.0-02952 (inclusive) and earlier
• Recommended Actions:
  • Please update to the following versions: SMA 1000 series products version 12.4.3-03670 (inclusive) or later, SMA 1000 series products version 12.5.0-03082 (inclusive) or later
• References:
  1. https://www.twcert.org.tw/tw/cp-169-11274-4f8dd-1.html

Computer and Communication Center
Network System Division