SonicWall SMA 1000 Has a Third Pre-Auth SSRF Door, and This One Makes the Appliance Issue Requests for the Attacker
Photo: Pixabay (illustration)
A pre-authentication vulnerability in the SonicWall SMA1000 series allows an unauthenticated request to turn the device into an unintended proxy for remote attackers. According to the SonicWall PSIRT advisory SNWLID-2026-0017 , this mechanism, known as a confused deputy, permits the appliance to reach internal functionality and perform unauthorized operations without requiring any credentials. The SMA1000 line has now drawn three disclosures with the same opening, a pre-authentication SSRF at the Work Place or proxy layer. This advisory lands four weeks after the second chain’s coverage asked whether the patches were treating symptoms instead of the root cause.
Source: Forkast
