SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.” “There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild,” the vendor said, but the one mentioned above could soon be, given attackers’ … More →The post SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) appeared first on Help Net Security.