Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
About this summary. This is a short excerpt from the description that Dark Reading published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://www.darkreading.com/vulnerabilities-threats/max-severity-ssrf-flaw-sonicwall-sma-devices-under-attack
Source attribution: headline and facts are from Dark Reading (darkreading.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
SonicWall security advisory (AV26-1017)
Serial number: AV26-1017 Date: October 7, 2026 As of October 6, 2026, SonicWall is affected by vulnerabilities in the following product: SMA1000 Models - 6210, 7210…
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most…
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances.
WatchGuard security advisory (AV26-1094)
Serial number: AV26-1094 Date: October 28, 2026 As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple…
Adobe security advisory (AV26-1092)
Serial number: AV26-1092 Date: October 28, 2026 As of October 27, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Substance 3D Painter Prior…
Even after PHP2Shell, blast radius matters more than a CVSS score
PHP2Shell shows how quickly attackers can exploit critical vulnerabilities, often before organizations have time to patch. Token Security explains why limiting the…