> TritonInfoSec News
Home / Oct 08, 2026 / Story
0
#3 The Hacker News general October 07, 2026 at 16:17 UTC

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

By [email protected] (The Hacker News)

AI Summary

SonicWall patched four vulnerabilities in its SMA1000 remote access appliances, including a CVSS 10.0 pre-authentication server-side request forgery (SSRF) flaw that allows unauthenticated attackers to route requests through the gateway to reach internal network functions. SonicWall stated no evidence of exploitation exists for any of the four flaws at time of disclosure. Administrators of SMA1000 series appliances should apply the released hotfixes immediately given the maximum severity rating.

Read full article → https://thehackernews.com/2026/10/sonicwall-patche…

Relevance score: 84.0/100

# More from October 08

  1. 1
    FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials The Hacker News
  2. 2
    Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details The Hacker News
  3. 4
    Hackers hijack Google domains after breaching ccTLD registries BleepingComputer
  4. 5
    ShinyHunters Extorted Boeing Spin-off Prior to Arrests Krebs on Security
  5. 6
    Senate passes healthcare cybersecurity bill after 190 million impacted by Change Healthcare breach The Record
  6. 7
    US posts $10 million reward for accused Chinese ‘Hafnium’ hacker The Record
  7. 8
    100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer The Hacker News
  8. 9
    Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer The Hacker News
  9. 10
    Chrome 155 Update Patches 247 Vulnerabilities SecurityWeek