GoKawiilAttackers exploit maximum-severity SSRF flaw in SonicWall SMA 1000 appliances
SonicWall disclosed CVE-2026-102255, a 10/10 CVSS SSRF vulnerability in the WorkPlace interface of its SMA 1000 secure access gateway, caused by an unintended alternate access path that lets unauthenticated attackers issue requests on the appliance's behalf. Days after the Oct. 6 advisory, security firms Previdian and Defused reported seeing exploitation attempts against this flaw on their honeypot sensors, though SonicWall says it has no evidence of in-the-wild exploitation.