{"id":"CVE-2026-102256","published":"2026-10-07T13:17:16.553","lastModified":"2026-10-08T04:17:06.950","description":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A post-authentication OS command injection vulnerability in the SMA1000 appliance allows authenticated attackers to execute arbitrary operating system commands with administrator privileges, potentially leading to full system compromise.","exploitability":"Exploitation requires a valid authentication credential and specific conditions within the appliance, making it moderately difficult but achievable for attackers who can establish initial access.","blast_radius":"If exploited, this vulnerability could allow attackers to gain complete administrative control over the SMA1000 appliance, potentially enabling them to execute arbitrary commands, access sensitive data, and compromise the entire network segment it protects.","remediation":"No fixed version is published. Disable the affected feature or restrict access to the named endpoint until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","os-command-injection","network-security-appliance"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:59:12.897Z"}}