CVE-2026-102255 — SonicWall SMA1000: critical flaw already targeted in attacks

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

SonicWall SMA1000: critical flaw CVE-2026-102255 already targeted in attacks

Patched on October 6, a maximum-severity flaw in SonicWall SMA1000 remote access gateways is already the target of exploitation attempts. Administrators should apply the patch without delay.

Oct 11, 20262 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)