Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

SonicWall SMA 1000 appliances contain a critical SSRF vulnerability (CVE-2026-102255) in the WorkPlace interface rated CVSS 10; third-party security vendors observed exploitation attempts against honeypots shortly after disclosure. SonicWall issued a hotfix and urged immediate patching; the report highlights the high risk posed by edge SSL‑VPN devices and ongoing targeted exploitation of SonicWall products.