CVE-2026-102255: Critical SonicWall SMA1000 SSRF

*SonicWall released hotfixes for CVE-2026-102255, a critical pre-authentication SSRF (CVSS 10.0) in the SMA1000 WorkPlace interface that can let an internet-facing appliance proxy requests to internal services; affected models include 6210, 7210, and 8200v and fixed hotfix builds are provided. Researchers observed exploitation attempts against honeypots and decoys—notably crafted OPTIONS requests targeting 127.0.0.1:5984 and CouchDB artifacts—so organizations should install the hotfixes, limit WorkPlace exposure and outbound access, and hunt for related telemetry.*