Unverified50% confidenceFactExact time

Advisory SNWLID-2026-0017 also contains three authenticated vulnerabilities: CVE-2026-102256 (post-authentication OS command injection, score 7.8), CVE-2026-102257 (Zip Slip path traversal, score 7.2), and CVE-2026-102258 (stored XSS, score 5.5).

1

Sources

50%

Confidence

Medium-term (~90 days)

Relevance

10/16/2026

First Seen

Valid until: 1/14/2027

Sources

SonicWall SMA1000 SSRF Vulnerability Exploited in Honeypot Probes Two Days After Patch

rss10/16/2026

Related Entities

CVE-2026-102256concept CVE-2026-102257concept CVE-2026-102258concept

Related Claims

Unverified2023年披露了Veeam的CVE-2023-27532凭证泄露漏洞75% similar VerifiedCVE-2021-44228 is the well-known Log4Shell vulnerability70% similar UnverifiedJadePuffer的攻击入口是Langflow的一个未授权代码执行漏洞，编号CVE-2025-3248，CVSS评分高达9.870% similar UnverifiedThe CVE numbers corresponding to the BragJack vulnerability are CVE-2026-0628 (Google) and CVE-2026-55945 (Microsoft), and all five affected vendors acknowledged the vulnerability.70% similar UnverifiedCVE-2026-94127 is a heap buffer overflow vulnerability in the F5 BIG-IP platform with a CVSS v3.1 score of 9.8, rated Critical.70% similar

Cite This Claim

Stable URI

https://kongchang.com/claim/1043462

API

curl https://kongchang.com/api/v1/knowledge/claims/1043462

MCP

get_claim(id=1043462)