CVE-2026-102255

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

An attacker could use the appliance as a proxy to attack internal systems, potentially leading to data disclosure, privilege escalation, or disruption of infrastructure.

Upgrade SMA1000 software to a version that eliminates this vulnerability. Restrict access to the Work Place interface and monitor network traffic for unusual requests.