SonicWall SMA1000 Vulnerability Exploited in the Wild

Critical SonicWall SMA1000 vulnerability (CVE-2026-102255, CVSS 10.0) is being actively exploited: unauthenticated attackers can send crafted OPTIONS requests to the Extraweb/WorkPlace portal to trigger a server-side request forgery into an internal CouchDB, bypassing authentication and potentially gaining access to internal network resources. Affected builds include 12.4.3-03526 and earlier and 12.5.0-02952 and earlier; no workaround exists and administrators must apply vendor hotfixes (12.4.3-03670, 12.5.0-03082) immediately.