SonicWall SMA 1000 Appliances Target of Critical Vulnerability Exploitation Attempts

Hackers are actively probing and targeting a critical security vulnerability in SonicWall Secure Mobile Access 1000 appliances. Dark Reading, news.lavx.hu, and The Hacker News all report that the attacks began just two days after public disclosure and patch release. The Hacker News reports that security observers detected 135 exploitation attempts against the devices. [1][2][3][4][5]

The security flaw is tracked as CVE-2026-102255 and has received a maximum CVSS severity score of 10.0. According to The Hacker News, the issue is a pre-authenticated server-side request forgery vulnerability that affects the SonicWall SMA 1000 series. [1][3]

SonicWall is an American cybersecurity vendor that manufactures internet appliances focused on network security and content control. The company provides hardware and services for virtual private networks, network firewalls, unified threat management, and email anti-spam protection. [6]

eSecurity Planet and news.lavx.hu both note that the rapid onset of scanning highlights the urgency for system administrators to update affected appliances. Security teams using SonicWall SMA 1000 series devices are urged to apply the official vendor patches immediately to block potential exploitation. [2][5]