CVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.
- EPSS 0.5% (39.3% percentile)
- CVSS 10 critical