SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall released hotfixes addressing four vulnerabilities in SMA1000 appliances — most notably CVE-2026-102255, an unauthenticated SSRF in the WorkPlace portal rated CVSS 10.0 — plus three additional flaws (an OS command injection, a Zip Slip, and stored XSS) that require login; affected firmware versions and fixed builds are listed, the hotfix is available from MySonicWall, and while SonicWall says it has no evidence these new flaws are being exploited, it notes prior SSRF exploits earlier in the year.