SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug

SonicWall has disclosed yet another critical flaw in one of its core products. CVE-2026-102255 , rated 10 in severity, the highest possible on the Common Vulnerability Scoring System (CVSS), is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. An unintended access path could allow attackers to order the appliance to issue requests on their behalf and gain access to internal functions to perform unauthorized actions.