Apply the security updates released by SonicWall for SMA 1000 firmware immediately. Administrators should review vendor advisories, check the CISA Known Exploited Vulnerabilities catalog, and monitor appliance logs for unusual outbound connections. Network segmentation and strict outbound filtering are recommended as defensive measures while patches are being deployed.
Security researchers have confirmed that a maximum-severity vulnerability in SonicWall SMA1000 appliances, tracked as CVE-2026-102255, is being actively exploited in real-world attacks. The flaw was patched on Tuesday, and exploitation has been confirmed shortly thereafter, highlighting the urgent need for administrators to apply security updates.
SonicWall has confirmed active exploitation of a critical server-side request forgery vulnerability in Secure Mobile Access 1000 appliances. Exploitation was observed in the wild shortly after public disclosure, with over 135 attempts detected. The issue affects SMA 1000 devices and requires urgent patching to prevent unauthorized access and data exfiltration.
