CVE-2026-102258
Cross-site scripting in SonicWall SMA1000
CVSS score
6.1
EPSS probability
%0.4
Risk score
0.0
Published
12 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that any of the four flaws is being
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:30EPSS %100
9.8
CVE-2024-53704 Actively exploitedImproper authentication in SonicWall SonicOS
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2021-20021 Actively exploitedImproper privilege management in SonicWall Email Security
Workaround Public Exploits:2EPSS %89
7.5
CVE-2019-7481 Actively exploitedSQL injection in SonicWall SMA100
Workaround Public Exploits:1EPSS %100
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:8EPSS %100
9.8
CVE-2021-20016 Actively exploitedSQL injection in SonicWall SMA100
WorkaroundEPSS %40
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-102258"