Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

A critical vulnerability tracked as CVE-2026-102255 (CVSS 10.0) in SonicWall Secure Mobile Access (SMA) 1000 appliances is being actively exploited. The flaw is a pre-authenticated server-side request forgery (SSRF) vulnerability allowing remote attackers to direct the appliance to issue arbitrary requests. At least 135 exploitation attempts have been observed following public disclosure. The vulnerability requires no authentication, making it particularly dangerous. SonicWall has released a patch and users are strongly advised to update immediately. Active exploitation began within days of the public disclosure of the vulnerability.