{"id":"CVE-2026-102255","published":"2026-10-07T13:17:16.387","lastModified":"2026-10-07T16:17:32.440","description":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-441","CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A pre-authentication SSRF vulnerability allows remote unauthenticated attackers to exploit the SMA1000 Appliance Work Place interface to issue requests on behalf of the appliance, potentially accessing internal functionality and performing unauthorized operations.","exploitability":"Exploitation is relatively straightforward as it requires no authentication, but the attacker must be able to manipulate the appliance's requests.","blast_radius":"If exploited, this vulnerability could lead to unauthorized access to internal systems and operations, posing a significant risk to the organization's security.","remediation":"Disable the affected feature or restrict access to the named endpoint.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","unauth","web","internal-access"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:33.730Z"}}