CVE-2026-102257

{
  "etk_id": "ETK-2026-885",
  "cve_id": "CVE-2026-102257",
  "display_id": "CVE-2026-102257",
  "ghsa_id": "GHSA-5vfm-g74w-hp7p",
  "euvd_id": "EUVD-2026-94326",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Archive path traversal in SMA1000 AMC",
  "summary": "SMA1000 Appliance Management Console is affected by an archive path traversal flaw. An attacker with high privileges may cause files to be placed outside the intended extraction location and potentially execute code remotely. Processing of a malicious archive is required.",
  "mitigation": "Restrict AMC administrative access to trusted users and prevent untrusted archives from being processed. Isolate the management interface from untrusted networks and monitor archive-handling activity until a vendor update is available.",
  "vendor": "sonicwall",
  "product": "SMA1000",
  "affected": [
    {
      "affected_notes": [
        "12.4.3-03526 (platform-hotfix) and older versions",
        "12.5.0-02952 (platform-hotfix) and older versions"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "SMA1000",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0065,
  "epss_percentile": 0.5032,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.5538116,
  "t0_at": "2026-10-07T13:12:25.319000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-07T13:12:25.319000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T13:12:25.319000+00:00",
      "url": "https://github.com/advisories/GHSA-5vfm-g74w-hp7p"
    }
  }
}