https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 02:26:41 +0000 https://vulnerability.circl.lu/sighting/6d37473c-e1d4-44b1-8bf1-d4c01ccb115f/export {"uuid": "6d37473c-e1d4-44b1-8bf1-d4c01ccb115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdchbm4fx2k", "content": "SonicWall\u3001SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8a8d\u8a3c\u524dSSRF\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff08CVE-2026-102255\uff09\n\nSonicWall\u306f\u3001\u4e3b\u529b\u306e\u30bb\u30ad\u30e5\u30a2\u30e2\u30d0\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\uff08SMA\uff091000\u30b7\u30ea\u30fc\u30ba\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5b58\u5728\u3059\u308b4\u4ef6\u306e\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u3046\u3061\u306e1\u4ef6\uff08CVE-2026-102255\uff09\u306f\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u300c\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u81ea\u5206\u306e\u4ee3\u308f\u308a\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u767a\u884c\u3055\u305b\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u5230\u9054\u3057\u3066\u4e0d\u6b63", "creation_timestamp": "2026-10-08T01:25:14.217161Z"} {"uuid": "6d37473c-e1d4-44b1-8bf1-d4c01ccb115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdchbm4fx2k", "content": "SonicWall\u3001SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8a8d\u8a3c\u524dSSRF\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff08CVE-2026-102255\uff09\n\nSonicWall\u306f\u3001\u4e3b\u529b\u306e\u30bb\u30ad\u30e5\u30a2\u30e2\u30d0\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\uff08SMA\uff091000\u30b7\u30ea\u30fc\u30ba\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5b58\u5728\u3059\u308b4\u4ef6\u306e\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u3046\u3061\u306e1\u4ef6\uff08CVE-2026-102255\uff09\u306f\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u300c\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u81ea\u5206\u306e\u4ee3\u308f\u308a\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u767a\u884c\u3055\u305b\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u5230\u9054\u3057\u3066\u4e0d\u6b63", "creation_timestamp": "2026-10-08T01:25:14.217161Z"} https://vulnerability.circl.lu/sighting/6d37473c-e1d4-44b1-8bf1-d4c01ccb115f/export Thu, 08 Oct 2026 01:25:14 +0000 https://vulnerability.circl.lu/sighting/0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd/export {"uuid": "0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdaifpdqn2r", "content": "CVE-2026-102255 - sma1000\nThe SMA1000 appliance\u2019s Workplace interface allows outsiders to send the device its own network requests without logging in. This could let an attacker reach hidden internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sma1000 #sonicwall #CVE #infosec", "creation_timestamp": "2026-10-08T00:50:04.676566Z"} {"uuid": "0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdaifpdqn2r", "content": "CVE-2026-102255 - sma1000\nThe SMA1000 appliance\u2019s Workplace interface allows outsiders to send the device its own network requests without logging in. This could let an attacker reach hidden internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sma1000 #sonicwall #CVE #infosec", "creation_timestamp": "2026-10-08T00:50:04.676566Z"} https://vulnerability.circl.lu/sighting/0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd/export Thu, 08 Oct 2026 00:50:04 +0000 https://vulnerability.circl.lu/sighting/2850bce6-5f26-4690-a8c1-1b2829814956/export {"uuid": "2850bce6-5f26-4690-a8c1-1b2829814956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxd5xxc4gt25", "content": "\ud83d\udea8 Rapid Response: SonicWall patched a critical CVSS 10.0 pre-auth SSRF in SMA1000 (CVE-2026-102255).\n\nCensys detects 5,966 Internet-exposed hosts and 39,310 web properties running SMA1000/Secure Mobile Access, excluding honeypots. \n\nCensys ARC advisory: https://bit.ly/3VWfWJc \n", "creation_timestamp": "2026-10-08T00:05:06.519437Z"} {"uuid": "2850bce6-5f26-4690-a8c1-1b2829814956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxd5xxc4gt25", "content": "\ud83d\udea8 Rapid Response: SonicWall patched a critical CVSS 10.0 pre-auth SSRF in SMA1000 (CVE-2026-102255).\n\nCensys detects 5,966 Internet-exposed hosts and 39,310 web properties running SMA1000/Secure Mobile Access, excluding honeypots. \n\nCensys ARC advisory: https://bit.ly/3VWfWJc \n", "creation_timestamp": "2026-10-08T00:05:06.519437Z"} https://vulnerability.circl.lu/sighting/2850bce6-5f26-4690-a8c1-1b2829814956/export Thu, 08 Oct 2026 00:05:06 +0000 https://vulnerability.circl.lu/sighting/64f077b5-e8a9-4b3c-a9e3-b51e10e97331/export {"uuid": "64f077b5-e8a9-4b3c-a9e3-b51e10e97331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxd4psp4tr2p", "content": "\ud83e\udd16 SonicWall SMA1000 hotfixes: critical pre-auth SSRF CVE-2026-102255 (CVSS 10.0) in the WorkPlace portal lets unauthenticated attackers reach internal functions. 3 more flaws (CVSS \u22647.8 RCE) need admin login.\nhttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T23:42:37.968913Z"} {"uuid": "64f077b5-e8a9-4b3c-a9e3-b51e10e97331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxd4psp4tr2p", "content": "\ud83e\udd16 SonicWall SMA1000 hotfixes: critical pre-auth SSRF CVE-2026-102255 (CVSS 10.0) in the WorkPlace portal lets unauthenticated attackers reach internal functions. 3 more flaws (CVSS \u22647.8 RCE) need admin login.\nhttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T23:42:37.968913Z"} https://vulnerability.circl.lu/sighting/64f077b5-e8a9-4b3c-a9e3-b51e10e97331/export Wed, 07 Oct 2026 23:42:37 +0000 https://vulnerability.circl.lu/sighting/f292692a-0920-433f-a93e-cad7b3214a9a/export {"uuid": "f292692a-0920-433f-a93e-cad7b3214a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxcskkfwkj2j", "content": "SMA1000 Appliance Work Place\u306b\u8a8d\u8a3c\u306a\u3057SSRF\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u672c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u30a2\u30af\u30bb\u30b9\u3055\u305b\u3001\u4e0d\u6b63\u64cd\u4f5c\u3092\u884c\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-102255 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-10-07T20:40:43.995468Z"} {"uuid": "f292692a-0920-433f-a93e-cad7b3214a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxcskkfwkj2j", "content": "SMA1000 Appliance Work Place\u306b\u8a8d\u8a3c\u306a\u3057SSRF\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u672c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u30a2\u30af\u30bb\u30b9\u3055\u305b\u3001\u4e0d\u6b63\u64cd\u4f5c\u3092\u884c\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-102255 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-10-07T20:40:43.995468Z"} https://vulnerability.circl.lu/sighting/f292692a-0920-433f-a93e-cad7b3214a9a/export Wed, 07 Oct 2026 20:40:43 +0000 https://vulnerability.circl.lu/sighting/e391408f-f036-4c97-949c-4f9698acb219/export {"uuid": "e391408f-f036-4c97-949c-4f9698acb219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mxcrgjfdkg2y", "content": "SonicWall patched a critical CVSS 10 SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions, with no evidence of exploitation.\n\nCVE-2026-102255 #Flaw #Patch #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-07T20:20:36.007536Z"} {"uuid": "e391408f-f036-4c97-949c-4f9698acb219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mxcrgjfdkg2y", "content": "SonicWall patched a critical CVSS 10 SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions, with no evidence of exploitation.\n\nCVE-2026-102255 #Flaw #Patch #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-07T20:20:36.007536Z"} https://vulnerability.circl.lu/sighting/e391408f-f036-4c97-949c-4f9698acb219/export Wed, 07 Oct 2026 20:20:36 +0000 https://vulnerability.circl.lu/sighting/65594e02-2f94-42de-b0b0-001920a0be65/export {"uuid": "65594e02-2f94-42de-b0b0-001920a0be65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxcnxeldar2j", "content": "SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that allows remote unauthenticated attackers to issue requests on behalf of the appliance.", "creation_timestamp": "2026-10-07T19:18:26.033831Z"} {"uuid": "65594e02-2f94-42de-b0b0-001920a0be65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxcnxeldar2j", "content": "SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that allows remote unauthenticated attackers to issue requests on behalf of the appliance.", "creation_timestamp": "2026-10-07T19:18:26.033831Z"} https://vulnerability.circl.lu/sighting/65594e02-2f94-42de-b0b0-001920a0be65/export Wed, 07 Oct 2026 19:18:26 +0000 https://vulnerability.circl.lu/sighting/62f488aa-ef38-464e-bb20-c4066726e873/export {"uuid": "62f488aa-ef38-464e-bb20-c4066726e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxcmphgj7c52", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score [\u2026]", "creation_timestamp": "2026-10-07T18:56:14.064886Z"} {"uuid": "62f488aa-ef38-464e-bb20-c4066726e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxcmphgj7c52", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score [\u2026]", "creation_timestamp": "2026-10-07T18:56:14.064886Z"} https://vulnerability.circl.lu/sighting/62f488aa-ef38-464e-bb20-c4066726e873/export Wed, 07 Oct 2026 18:56:14 +0000 https://vulnerability.circl.lu/sighting/907e99bc-9379-4592-b3a6-cebabcd0deb4/export {"uuid": "907e99bc-9379-4592-b3a6-cebabcd0deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-17261912-59c25ab57dc2c25a", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could [\u2026]SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances", "creation_timestamp": "2026-10-07T18:56:01.537614Z"} {"uuid": "907e99bc-9379-4592-b3a6-cebabcd0deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-17261912-59c25ab57dc2c25a", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could [\u2026]SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances", "creation_timestamp": "2026-10-07T18:56:01.537614Z"} https://vulnerability.circl.lu/sighting/907e99bc-9379-4592-b3a6-cebabcd0deb4/export Wed, 07 Oct 2026 18:56:01 +0000 https://vulnerability.circl.lu/sighting/600417dc-18a6-4d41-bed8-9f75abd82cad/export {"uuid": "600417dc-18a6-4d41-bed8-9f75abd82cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117401083449675096", "content": "Chat, is it bad if your zero-trust VPN device forwards network requests without auth? Asking for thousands of friends.\nSonicWall SMA1000 devices have a SSRF vulnerability that needs patching.\nhttps://ifin.network/t/cve-2026-102255-pre-auth-ssrf-in-sonicwall-sma1000-devices/889\n#IFIN #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-07T18:39:52.218143Z"} {"uuid": "600417dc-18a6-4d41-bed8-9f75abd82cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117401083449675096", "content": "Chat, is it bad if your zero-trust VPN device forwards network requests without auth? Asking for thousands of friends.\nSonicWall SMA1000 devices have a SSRF vulnerability that needs patching.\nhttps://ifin.network/t/cve-2026-102255-pre-auth-ssrf-in-sonicwall-sma1000-devices/889\n#IFIN #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-07T18:39:52.218143Z"} https://vulnerability.circl.lu/sighting/600417dc-18a6-4d41-bed8-9f75abd82cad/export Wed, 07 Oct 2026 18:39:52 +0000