EP. 176: SonicWall SMA1000 CVE-2026-102255 Exposes Enterprise Gateways to Unauthenticated SSRF

The Digital Warfare Podcast · Oct 7, 2026 · 5m · transcript

Summary

SonicWall has disclosed CVE-2026-102255, a maximum-severity server-side request forgery vulnerability affecting the SMA1000 6210, 7210, and 8200v secure access appliances. The flaw exists in the Appliance WorkPlace interface and can be reached remotely without authentication through an alternate access path.

Successful exploitation could allow an attacker to force the affected appliance to issue attacker-controlled requests, potentially reaching internal services or functionality that would not normally be directly accessible from the internet. Because SMA1000 appliances provide…