SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of...

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances

VERWANDTEARTIKEL

CVE-2026-107211 - Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic

CVE-2026-107213 - Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element

CVE-2026-76465 - Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

CVE-2026-95606 - WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

CVE-2026-95605 - WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

CVE-2026-95534 - WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability