[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0WtEYIDWXNaVms2dSm1wX9piZMiBaRaEH8CIOTH4f7o":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"739150ad-6ea1-4091-834c-2c644945b6df","Critical SonicWall Vulnerability Exploited Days After Disclosure","critical-sonicwall-vulnerability-exploited-days-after-disclosure-d58e65","CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.","A critical pre-authenticated SSRF vulnerability in SonicWall SMA1000 appliances, tracked as CVE-2026-102255, is being actively exploited by threat actors just days after its public disclosure. The flaw allows unauthenticated attackers to perform unauthorized operations by directing the appliance to issue requests on their behalf. Cybersecurity firms have warned that successful exploitation could lead to a complete takeover of vulnerable devices.","Critical SonicWall SMA1000 vulnerability CVE-2026-102255 exploited days after disclosure.","https:\u002F\u002Fwww.securityweek.com\u002Fcritical-sonicwall-vulnerability-exploited-days-after-disclosure\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F08\u002FSonicWall.jpg","2026-10-12T08:36:01+00:00","2026-10-12T10:00:09.895994+00:00",9,[17,20],{"name":18,"type":19},"SMA1000","product",{"name":21,"type":22},"SonicWall","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-102255","Critical pre-authenticated SSRF vulnerability in SonicWall SMA1000 appliances.",[21,18],{"controls":48,"vendors":135},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":79,"name":80,"problem":81,"products":82},"patch-management","Automated patch management","Known holes get closed in days, not months.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":40,"name":108,"problem":109,"products":110},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[111,119,127],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[136,139],{"slug":120,"name":121,"logo_path":122,"roles":137},[138],"reported_by",{"slug":140,"name":21,"logo_path":141,"roles":142},"sonicwall","\u002Fvendor-logos\u002Fsonicwall.png",[143],"affected",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":159},"critical-sonicwall-ssrf-flaw-exploited-within-days-of-disclosure","Critical SonicWall SSRF Flaw Exploited Within Days of Disclosure","A critical pre-authenticated Server-Side Request Forgery (SSRF) vulnerability in SonicWall SMA1000 appliances was actively weaponized by threat actors within days of its public disclosure, leaving organizations with an extremely narrow window to respond. The flaw requires no authentication, meaning any internet-facing device is immediately at risk without any user interaction required. This rapid exploitation timeline highlights the growing trend of attackers monitoring vulnerability disclosures and launching attacks before organizations can patch — a practice known as 'patch-gap' exploitation. The potential for complete device takeover makes this especially dangerous, as SMA appliances are typically used for secure remote access, meaning a compromised device could serve as a launchpad into the broader corporate network. Organizations that lack mature patch prioritization and emergency response procedures are disproportionately exposed to these fast-moving threats.",[149,150,151,152,153,154,155,156,157,158],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-7: Boundary Protection","CISA KEV (Known Exploited Vulnerabilities) Catalog","ITIL Problem Management: Proactive Problem Identification","PTES (Penetration Testing Execution Standard): Vulnerability Assessment Phase",{}]