CVE-2026-102256

CVE Enrichment

CVSS: 7.8 HIGH
EPSS: 0.49%
EPSS Percentile: 40.57%
CISA KEV: Not listed

Description

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: PSIRT@sonicwall.com
Published: 07-Oct-2026 20:17
Last Modified: 08-Oct-2026 11:17
EPSS Date: 2026-10-10
CWE: CWE-78

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

References

PSIRT@sonicwall.com

Last enrichment sync: 11-Oct-2026 12:27
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

outside researchers for the four new flaws: Benoît Sevens of Anthropic for CVE-2026-102255 and CVE-2026-102256, and Brian Mariani of DigitalCanion SA for the other two, one of them reported through Trend Micro's SonicWall Releases Hotfixes for Critical Pre-Authentication SSRF Flaw in SMA1000 Appliances

CVE (5)

People (2)

Vendors (1)

Products (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.