{"vulnerability": "cve-2026-102255", "sightings": [{"uuid": "a14a1179-f5b5-4c2a-9a95-aa2a3cc0a723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mx7xhzthmo23", "content": "SonicWall SMA1000 vulnerability CVE-2026-102255 (CVSS 10) allows pre-auth SSRF. Three more flaws fixed. Upgrade to 12.5.0-03082 now.\n\n#SonicWall #SMA1000 #CVE2026102255 #CVE2026102256 #SSRF #RemoteAccess #VPN #Vulnerability", "creation_timestamp": "2026-10-06T17:30:49.331394Z"}, {"uuid": "395e64f4-82e7-4ab8-85b6-d4470749cf40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117395659415580261", "content": "new SonicWall SMA1000 advisory. Check out CVE-2026-102255 (10.0 critical) Pre-authentication SSRF via unintended forward-proxy. No mention of exploitation, but it's not a good look that your Secure Mobile Access is not secure (including four known exploited vulnerabilities in the past 90 days)\nhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017\n#sonicwall #sma1000 #cve", "creation_timestamp": "2026-10-06T19:40:24.062470Z"}, {"uuid": "c31e8983-0fb2-4e8b-87dd-545081959368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbg3tq3xt2q", "content": "SonicWall SMA1000 Vulnerability CVE-2026-102255: Critical Pre-Auth SSRF Flaw\n\uff08SonicWall SMA1000\u306bCVSS 10.0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u5185\u90e8\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\uff09 #SecurityOnline (Oct 7)\nsecurityonline.info/sonicwall-sm...", "creation_timestamp": "2026-10-07T07:25:07.193866Z"}, {"uuid": "f726d338-715a-4ec8-a8ff-283dffcd1fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxbg5enp7r2v", "content": "SonicWall SMA1000 Vulnerability CVE-2026-102255: Critical Pre-Auth SSRF Flaw\n\uff08SonicWall SMA1000\u306bCVSS 10.0\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u5185\u90e8\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\uff09 #SecurityOnline (Oct 7)\nsecurityonline.info/sonicwall-sm...", "creation_timestamp": "2026-10-07T07:25:57.685455Z"}, {"uuid": "41d69f6a-4bc4-4e5f-9bfb-c311377050fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mxbrbdv7dk2m", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/10/07/s...\n\n#cybersecurity #cybersecuritynews #enterprise #MSP #securityupdate #vulnerability", "creation_timestamp": "2026-10-07T10:45:04.289870Z"}, {"uuid": "c955df83-cfd5-4e0b-9eaa-b67496e4e14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxbsinujb22r", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\nwww.helpnetsecurity.com/2026/10/07/s...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-10-07T11:07:02.335124Z"}, {"uuid": "62a1d6d1-1092-4546-a0ee-27da76632255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117399415684837516", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\nSonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, including CVE-2026-102255, which could let remote unauthenticated attackers direct the appliance to issue requests on their behalf and perform unauthorized operations. The vendor says there is currently no evidence of in-the-wild exploitation, but attackers' track record with similar flaws suggests it could come soon. https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/", "creation_timestamp": "2026-10-07T11:35:22.615166Z"}, {"uuid": "baedc11e-73a5-43aa-8664-b274607a6632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxbu3dblh22j", "content": "SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)\n\nSonicWall has patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 series appliances, including CVE-2026-102255, which could let rem... https://threatintel.cc/2026/10/07/sonicwall-fixes-preauth-ssrf-flaw.html", "creation_timestamp": "2026-10-07T11:35:22.670661Z"}, {"uuid": "4a4c39f4-9e8a-4a97-9227-0340e2ea4925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117399734917247848", "content": "Tracked as CVE-2026-102255, the vulnerability was found in the Appliance WorkPlace interface of SMA1000 6210, 7210, and 8200v models, but it does not affect the SMA 100 Series product line or SSL-VPN running on SonicWall firewalls. https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-max-severity-ssrf-flaw-in-sma1000-gateways/", "creation_timestamp": "2026-10-07T12:56:34.485193Z"}, {"uuid": "221de583-7f2d-49cf-8175-afb68d51913b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mxbyn7dwx22g", "content": "Tracked as CVE-2026-102255, the vulnerability was found in the Appliance WorkPlace interface of SMA1000 6210, 7210, and 8200v models, but it does not affect the SMA 100 Series product line or SSL-VPN running on SonicWall firewalls. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-10-07T12:56:54.778709Z"}, {"uuid": "f40548f4-2dad-4de2-b114-9943f8c50a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mxc3vxovnb23", "content": "\ud83d\udd17 CVE : CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-102258", "creation_timestamp": "2026-10-07T13:55:31.470385Z"}, {"uuid": "b2b0ae0a-79c3-436d-b8ac-7aec10071233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxc4wlaika2g", "content": "\ud83d\udcf0 SonicWall Peringatkan Celah SSRF Kritis CVE-2026-102255 pada SMA1000\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/07/sonicwall-sma1000-cve-2026-102255-ssrf/\n\n#cisa #cybersecurity #keamananSiber #ransomware #sonicwall #vulnerability #zero-day", "creation_timestamp": "2026-10-07T14:13:45.604072Z"}, {"uuid": "0c7609ea-e2a6-42b4-a020-dc008d0099e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10269", "content": "\u26a0\ufe0f SonicWall has patched a CVSS 10.0 WorkPlace SSRF that requires no login.\n\nCVE-2026-102255 can reach internal functions before authentication. SonicWall says it has no evidence of exploitation.\n\nRead - https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T16:25:04.000000Z"}, {"uuid": "486fe783-f9d9-420f-b079-6a4336ec3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxcjxtw45q2x", "content": "\ud83d\udea8 CVE-2026-102255 \u2014 CVSS 10 CRITICAL\n\nA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unin...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102255\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-07T18:07:06.806070Z"}, {"uuid": "600417dc-18a6-4d41-bed8-9f75abd82cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102255", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117401083449675096", "content": "Chat, is it bad if your zero-trust VPN device forwards network requests without auth? Asking for thousands of friends.\nSonicWall SMA1000 devices have a SSRF vulnerability that needs patching.\nhttps://ifin.network/t/cve-2026-102255-pre-auth-ssrf-in-sonicwall-sma1000-devices/889\n#IFIN #ThreatIntel #ThreatIntelligence", "creation_timestamp": "2026-10-07T18:39:52.218143Z"}, {"uuid": "907e99bc-9379-4592-b3a6-cebabcd0deb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-17261912-59c25ab57dc2c25a", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score of 10.0. The issue is a pre-authentication SSRF bug in the WorkPlace portal that could [\u2026]SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances", "creation_timestamp": "2026-10-07T18:56:01.537614Z"}, {"uuid": "62f488aa-ef38-464e-bb20-c4066726e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxcmphgj7c52", "content": "SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions. SonicWall released hotfixes for four vulnerabilities in its SMA1000 remote access appliances, including a critical flaw tracked as CVE-2026-102255 (CVSS score [\u2026]", "creation_timestamp": "2026-10-07T18:56:14.064886Z"}, {"uuid": "65594e02-2f94-42de-b0b0-001920a0be65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxcnxeldar2j", "content": "SonicWall has patched four vulnerabilities in its SMA 1000 series appliances, including CVE-2026-102255, a pre-authentication SSRF flaw that allows remote unauthenticated attackers to issue requests on behalf of the appliance.", "creation_timestamp": "2026-10-07T19:18:26.033831Z"}, {"uuid": "e391408f-f036-4c97-949c-4f9698acb219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mxcrgjfdkg2y", "content": "SonicWall patched a critical CVSS 10 SSRF flaw in SMA1000 appliances that could let unauthenticated attackers reach internal functions, with no evidence of exploitation.\n\nCVE-2026-102255 #Flaw #Patch #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-07T20:20:36.007536Z"}, {"uuid": "f292692a-0920-433f-a93e-cad7b3214a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxcskkfwkj2j", "content": "SMA1000 Appliance Work Place\u306b\u8a8d\u8a3c\u306a\u3057SSRF\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u3001\u672c\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u30a2\u30af\u30bb\u30b9\u3055\u305b\u3001\u4e0d\u6b63\u64cd\u4f5c\u3092\u884c\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-102255 CVSS 10.0 | CRITICAL", "creation_timestamp": "2026-10-07T20:40:43.995468Z"}, {"uuid": "884bb47f-c2a4-4e70-a6ba-0cba3ad54f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://t.me/true_secator/8689", "content": "\u041f\u043e \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u0430\u043c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2026-21589, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Jira, Confluence \u0438 Bitbucket, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Previdian \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438-\u043b\u043e\u0432\u0443\u0448\u043a\u0435, \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0442\u0447\u0435\u0442\u0430. \u041f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441 \u0442\u0440\u0435\u0445 IP: 38.60.157[.]86, 146.70.187[.]234 \u0438 159.26.119[.]225.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-21589 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0442\u043e\u0447\u043d\u043e\u0435 \u0438\u043c\u044f \u0438 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443.\n\n\u0412 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a Atlassian \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0421\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f watchTowr \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u0441 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a CVE-2026-21589 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a Jira, Confluence \u0438 Bitbucket \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 Crowd.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f - \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Atlassian, \u0430 watchTowr \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 \u0434\u043b\u044f CVE-2026-21589.\n\n2. SonicWall \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0440\u0438\u0441\u043a\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA1000.\n\nCVE-2026-102255 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Appliance WorkPlace \u043c\u043e\u0434\u0435\u043b\u0435\u0439 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SMA 100 Series \u0438\u043b\u0438 SSL-VPN, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043f\u0443\u0442\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n3. Google \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0445 25 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 Framework \u0438 System, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u043c\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 System, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0430\u0432 \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0412 Framework \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0430 \u043f\u044f\u0442\u044c - \u043a EoP. \u0412 System \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0445 \u043a EoP, \u043f\u044f\u0442\u044c DoS, \u043e\u0434\u043d\u0430 RCE \u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n4. \u041a\u0430\u043a \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u0430\u044f \u0442\u0430\u0431\u043b\u0438\u0446\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0432 LibreOffice \u0438 Apache OpenOffice.\n\n\u0410\u0442\u0430\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 Java \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435.\n\n\u041f\u043e\u043a\u0430 \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u0438\u0448\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 PoC, \u0438 \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0442 5 \u043e\u043a\u0442\u044f\u0431\u0440\u044f LibreOffice \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-63277, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e 26.2.5 \u0438\u043b\u0438 26.8.0. \u0411\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b. \n\n\u0412 Apache OpenOffice \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-59265. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e \u0442\u0435\u043a\u0443\u0449\u0435\u0439, 4.1.16, \u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 4.1.17, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n5. \u0415\u0449\u0435 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Chrome 155 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c 247 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Chromecast, Browser, Navigation \u0438 Track \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-106382, CVE-2026-106197, CVE-2026-106358 \u0438 CVE-2026-106347.\n\n6. Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Exchange Server \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2026-96940 (CVSS 8,8).\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c Exchange. IT-\u0433\u0438\u0433\u0430\u043d\u0442 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u043e\u043b\u0435\u0435 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0439\u00bb.", "creation_timestamp": "2026-10-07T17:05:07.000000Z"}, {"uuid": "64f077b5-e8a9-4b3c-a9e3-b51e10e97331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxd4psp4tr2p", "content": "\ud83e\udd16 SonicWall SMA1000 hotfixes: critical pre-auth SSRF CVE-2026-102255 (CVSS 10.0) in the WorkPlace portal lets unauthenticated attackers reach internal functions. 3 more flaws (CVSS \u22647.8 RCE) need admin login.\nhttps://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html", "creation_timestamp": "2026-10-07T23:42:37.968913Z"}, {"uuid": "2850bce6-5f26-4690-a8c1-1b2829814956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxd5xxc4gt25", "content": "\ud83d\udea8 Rapid Response: SonicWall patched a critical CVSS 10.0 pre-auth SSRF in SMA1000 (CVE-2026-102255).\n\nCensys detects 5,966 Internet-exposed hosts and 39,310 web properties running SMA1000/Secure Mobile Access, excluding honeypots. \n\nCensys ARC advisory: https://bit.ly/3VWfWJc \n", "creation_timestamp": "2026-10-08T00:05:06.519437Z"}, {"uuid": "0efaf5d6-ebd2-4a11-b3d1-1aea5ef31fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxdaifpdqn2r", "content": "CVE-2026-102255 - sma1000\nThe SMA1000 appliance\u2019s Workplace interface allows outsiders to send the device its own network requests without logging in. This could let an attacker reach hidden internal\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sma1000 #sonicwall #CVE #infosec", "creation_timestamp": "2026-10-08T00:50:04.676566Z"}, {"uuid": "6d37473c-e1d4-44b1-8bf1-d4c01ccb115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102255", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxdchbm4fx2k", "content": "SonicWall\u3001SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8a8d\u8a3c\u524dSSRF\u8106\u5f31\u6027\u3092\u4fee\u6b63\uff08CVE-2026-102255\uff09\n\nSonicWall\u306f\u3001\u4e3b\u529b\u306e\u30bb\u30ad\u30e5\u30a2\u30e2\u30d0\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\uff08SMA\uff091000\u30b7\u30ea\u30fc\u30ba\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5b58\u5728\u3059\u308b4\u4ef6\u306e\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u307e\u3057\u305f\u3002\u305d\u306e\u3046\u3061\u306e1\u4ef6\uff08CVE-2026-102255\uff09\u306f\u3001\u8a8d\u8a3c\u3092\u53d7\u3051\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304c\u300c\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u81ea\u5206\u306e\u4ee3\u308f\u308a\u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u767a\u884c\u3055\u305b\u3001\u5185\u90e8\u6a5f\u80fd\u306b\u5230\u9054\u3057\u3066\u4e0d\u6b63", "creation_timestamp": "2026-10-08T01:25:14.217161Z"}]}