Max severity SonicWall SMA1000 flaw now exploited in attacks

A maximum-severity vulnerability tracked as CVE-2026-102255 affecting SonicWall SMA1000 appliances is being actively exploited in the wild. The flaw was patched just three days prior to confirmed exploitation being reported. SonicWall SMA1000 are secure remote access appliances widely used in enterprise environments. The active exploitation of a just-patched critical vulnerability indicates threat actors are moving quickly to leverage the flaw before organizations can apply updates. Organizations using SonicWall SMA1000 devices are urged to apply the patch immediately given the critical severity rating and confirmed in-the-wild exploitation.