CVE-2026-102255

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
Configurations

No configuration.

History

07 Oct 2026, 16:17

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 10.0

07 Oct 2026, 13:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-10-07 13:17

Updated : 2026-10-07 16:17


NVD link : CVE-2026-102255

Mitre link : CVE-2026-102255

CVE.ORG link : CVE-2026-102255


JSON object : View

Products Affected

No product.

CWE
CWE-441

Unintended Proxy or Intermediary ('Confused Deputy')

CWE-918

Server-Side Request Forgery (SSRF)