WARNING: Pre-Authentication Server-Side Request Forgery and Post-Authentication Remote Code Execution in SonicWall SMA1000 Appliances Can Be Exploited to Perform Unauthorized Operations and Execute Arbitrary Commands. Patch Immediately!

Critical vulnerabilities affecting SonicWall SMA1000 series (models 6210, 7210, 8200v; affected versions 12.4.3-03526 and older, 12.5.0-02952 and older) include a pre-auth SSRF (CVE-2026-102255, CVSS 10.0) that can make the appliance act as a forward proxy, post-auth OS command injection (CVE-2026-102256) and Zip Slip path traversal (CVE-2026-102257) leading to remote code execution, and a stored XSS (CVE-2026-102258); the advisory from the Centre for Cybersecurity Belgium urges immediate patching and enhanced monitoring to detect and respond to potential compromises.