SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall has issued hotfixes for a maximum-severity server-side request forgery bug affecting its SMA1000 series secure remote access gateways, specifically the 6210, 7210, and 8200v models. Tracked as CVE-2026-102255, the issue lies in the Appliance WorkPlace interface and arises from an unexpected alternate access path, allowing an unauthenticated remote attacker to force the device into making requests on their behalf and reach internal functions without needing much skill or access. The SMA 100 line and SonicWall firewall SSL-VPN services are not impacted. SonicWall says it has no evidence of active exploitation so far, but given that SMA1000 appliances have repeatedly been targeted in zero-day attacks this year—including ransomware-linked campaigns flagged by CISA—customers are strongly urged to apply the fix promptly, especially since Shadowserver still counts over 400 internet-facing SMA1000 devices.