CVE-2026-102255

{
  "etk_id": "ETK-2026-1331",
  "cve_id": "CVE-2026-102255",
  "display_id": "CVE-2026-102255",
  "ghsa_id": "GHSA-xww4-pc4h-x9hj",
  "euvd_id": "EUVD-2026-94324",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Pre-authentication SSRF in SMA1000 Appliance Work Place",
  "summary": "SMA1000 Appliance Work Place is affected by a pre-authentication server-side request forgery flaw. A remote attacker without authentication may cause the appliance to send requests on their behalf and access internal functionality through an alternate access path.",
  "mitigation": "Restrict network access to the SMA1000 Appliance Work Place interface to trusted administrators and networks. Monitor for vendor updates, as no fixed version is recorded in the available advisory data.",
  "vendor": "sonicwall",
  "product": "SMA1000",
  "affected": [
    {
      "affected_notes": [
        "12.4.3-03526 (platform-hotfix) and older versions",
        "12.5.0-02952 (platform-hotfix) and older versions"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "SMA1000",
      "purl": null
    }
  ],
  "cwes": [
    441,
    918
  ],
  "cvss_score": 10,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": 0.0048,
  "epss_percentile": 0.399,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.666276316666666,
  "t0_at": "2026-10-07T13:07:13.384000+00:00",
  "signals": {
    "kev": {
      "at": "2026-10-07T00:00:00+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T13:07:13.384000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-102255"
    },
    "trigger_signal": {
      "at": "2026-10-07T13:07:13.384000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T13:07:13.384000+00:00",
      "url": "https://github.com/advisories/GHSA-xww4-pc4h-x9hj"
    }
  }
}