<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>SonicWall security news · Threat Recap</title><link>vendors/sonicwall.html</link><description>Security news, advisories and CVEs for SonicWall</description><lastBuildDate>Mon, 19 Oct 2026 15:01:23 GMT</lastBuildDate>
<item><title>ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability</title><link>http://www.zerodayinitiative.com/advisories/ZDI-26-770/</link><guid isPermaLink="false">ovv5fu</guid><pubDate>Thu, 15 Oct 2026 05:00:00 GMT</pubDate><description>ZDI Published Advisories. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are…</description><category>Advisory</category><category>Vulnerability</category></item>
<item><title>Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack</title><link>https://www.darkreading.com/vulnerabilities-threats/max-severity-ssrf-flaw-sonicwall-sma-devices-under-attack</link><guid isPermaLink="false">zlxfcr</guid><pubDate>Mon, 12 Oct 2026 21:42:42 GMT</pubDate><description>Dark Reading. Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.</description><category>Vulnerability</category></item>
<item><title>SonicWall and Splunk Patch Critical Vulnerabilities</title><link>https://www.securityweek.com/sonicwall-and-splunk-patch-critical-vulnerabilities/</link><guid isPermaLink="false">m6vonf</guid><pubDate>Thu, 08 Oct 2026 12:37:32 GMT</pubDate><description>SecurityWeek. Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges.</description><category>Vulnerability</category></item>
<item><title>SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances</title><link>https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html</link><guid isPermaLink="false">1x3g6gq</guid><pubDate>Wed, 07 Oct 2026 16:17:44 GMT</pubDate><description>The Hacker News. SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company&#39;s network and applications. The most serious could allow an attacker without a login to send requests through the appliance and…</description><category>Vulnerability</category></item>
<item><title>SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)</title><link>https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/</link><guid isPermaLink="false">fanu0i</guid><pubDate>Wed, 07 Oct 2026 10:37:53 GMT</pubDate><description>Help Net Security (+5 more sources). SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and…</description><category>Vulnerability</category><category>Zero-day</category></item>
<item><title>SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)</title><link>https://news.google.com/rss/articles/CBMiuAFBVV95cUxNQ1BScUxvNzRoSmc1ZEw1dVAyUXhwZElHa2VlX0FRUUtPV1d4SzVVXzlPSDJIdlVaQXlhM3lwTEhkMHdGZlB3SGpianlUak8wdl83WFV0aFdiXzZPS0VFb0JyUjRZZjZzQUJCeVRmYTM4OXd6MjVOd1ZDdkIwUUIwVmhDMlFXNnpUZnlENmdtVDJ1d3kzXzNiOUlqZjlUcnk0Tld0YUMxd0d0emJlSEJLOUdOMFRJaHlX?oc=5</link><guid isPermaLink="false">1v2fvir</guid><pubDate>Wed, 07 Oct 2026 10:37:53 GMT</pubDate><description>Help Net Security (+1 more sources). SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Help Net Security</description><category>Vulnerability</category></item>
</channel></rss>
