SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
2026-10-12T14:51:37Z•2f5c30ebcb3091e4592960c1d007749e8f3644786039b1cde4a1676dde3baac2
CVE-2026-102255AI-assisted cyberattacksAndroid malwareCISA KEVCVSS 10.0SSRFSonicWall SMA 1000WordPressactive exploitationdata thefte-commerce securityextortionfirmware malwareproxy botnetsocial engineering
What happened
Security Affairs reporting highlights active exploitation of a critical, unauthenticated SonicWall SMA 1000 SSRF vulnerability (CVE-2026-102255, CVSS 10.0), along with emerging AI-assisted cybercrime, preinstalled Android malware affecting devices in 150 countries, multiple vulnerabilities added to CISA’s KEV catalog, and large-scale social-engineering extortion. The most urgent issue is the SonicWall flaw due to public disclosure followed by observed attacks.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 2f5c30ebcb3091e4592960c1d007749e8f3644786039b1cde4a1676dde3baac2
- Enrichment time
- 2026-10-12T14:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.