<![CDATA[🔴 Critical: SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances]]>SonicWall has issued hotfixes for four vulnerabilities affecting its SMA1000 appliances, the gateways that provide remote workers with access to corporate networks and applications. The most severe of the four carries a CVSS score of 10.0 and is a pre-authentication SSRF flaw — meaning an attacker could exploit it without logging in, using the appliance to send requests that reach internal functions.

According to SonicWall, there is currently no evidence that any of the four flaws has been exploited in the wild.

Key points:

  • Affected product: SonicWall SMA1000 appliances
  • Four flaws patched via hotfix
  • Most critical issue: pre-authentication SSRF, rated CVSS 10.0
  • No known exploitation of any of the four flaws at this time

Administrators running SMA1000 devices should apply the available hotfixes as soon as possible and review their exposure, particularly given the unauthenticated nature of the highest-severity issue.

Source: The Hacker News

Does your organization run SMA1000 appliances, and have you already applied the hotfixes?

]]>https://xploitlk.com/topic/609/critical-sonicwall-patches-cvss-10.0-pre-authentication-ssrf-flaw-in-sma1000-appliancesRSS for NodeTue, 27 Oct 2026 09:28:23 GMTThu, 08 Oct 2026 06:30:20 GMT60