[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvNNrd7loO1lnmhKkQYBWI29xytTkn5an1BS_76F-hRQ":3},{"article":4,"iocs":46,"watch_terms":51,"solutions":52,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"e5186d91-28e0-43b0-8590-b1a16ca08ca1","Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack","maximum-severity-ssrf-flaw-in-sonicwall-sma-devices-under-attack-e65d97","Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.","A critical Server-Side Request Forgery (SSRF) vulnerability, designated CVE-2023-34064, is actively being exploited in SonicWall's Secure Mobile Access (SMA) 1000 series appliances. This flaw allows unauthenticated attackers to perform arbitrary requests on behalf of the appliance, potentially leading to further network compromise. SonicWall has released patches, but customers are urged to update immediately due to ongoing attacks.","Critical SSRF vulnerability in SonicWall SMA 1000 devices is actively being exploited.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fmax-severity-ssrf-flaw-sonicwall-sma-devices-under-attack","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt03ff00aa0ccf043c\u002F685b010d7bd6c2cb5e6d4834\u002FSonicWall_sign_Michael_Vi_Alamy.jpg?width=720&quality=80&disable=upscale","2026-10-12T21:42:42+00:00","2026-10-12T22:00:08.327457+00:00",9,[17,20],{"name":18,"type":19},"SMA 1000 series","product",{"name":21,"type":22},"SonicWall","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47],{"type":48,"value":49,"context":50},"cve","CVE-2023-34064","Critical SSRF vulnerability in SonicWall SMA 1000 series appliances",[21,18],{"controls":53,"vendors":136},[54,83,108],{"slug":55,"name":56,"problem":57,"products":58},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":84,"name":85,"problem":86,"products":87},"patch-management","Automated patch management","Known holes get closed in days, not months.",[88,92,100],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":84,"product_name":89,"url":90,"description":91},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":45,"name":109,"problem":110,"products":111},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",[137],{"slug":138,"name":21,"logo_path":139,"roles":140},"sonicwall","\u002Fvendor-logos\u002Fsonicwall.png",[141],"affected",{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":157},"critical-ssrf-flaw-in-sonicwall-sma-devices-actively-exploited","Critical SSRF Flaw in SonicWall SMA Devices Actively Exploited","A maximum-severity Server-Side Request Forgery (SSRF) vulnerability in SonicWall SMA 1000 series appliances is being actively exploited, allowing unauthenticated attackers to issue arbitrary requests through the appliance and pivot deeper into internal networks. The root issue lies in insufficient input validation on a publicly accessible service, compounded by delayed patch adoption among customers. Because these are edge devices designed to broker secure remote access, a compromise can expose an organization's entire internal network perimeter. This incident underscores how internet-facing network appliances are high-value, high-risk targets that require near-immediate patching when critical vulnerabilities are disclosed.",[147,148,149,150,151,152,153,154,155,156],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection","NIST RA-5: Vulnerability Monitoring and Scanning","NIST IR-4: Incident Handling","ITIL Problem Management (root cause analysis for recurring vulnerabilities)","ITIL Change Management (emergency change process for critical patches)",{}]