CVE-2026-102255

Summary

A pre-authentication SSRF vulnerability allows remote unauthenticated attackers to exploit the SMA1000 Appliance Work Place interface to issue requests on behalf of the appliance, potentially accessing internal functionality and performing unauthorized operations.

Exploitability

Exploitation is relatively straightforward as it requires no authentication, but the attacker must be able to manipulate the appliance's requests.

Blast radius

If exploited, this vulnerability could lead to unauthorized access to internal systems and operations, posing a significant risk to the organization's security.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable the affected feature or restrict access to the named endpoint.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.