SonicWall SMA 1000 SSRF (CVE-2026-102255) Is Already Being Exploited: Patch Now, Then Assume the Worst
Attackers began probing a CVSS 10.0 pre-auth SSRF in SonicWall SMA 1000 appliances two days after patches shipped. Here's what's known, why this product keeps getting hit, and what I'd do if I ran one.