The Hacker News
SonicWall released hotfixes for four flaws in its SMA1000 appliances, the most serious being CVE-2026-102255, a pre-authentication server-side request forgery bug in the WorkPlace portal rated 10.0 on the CVSS scale. SonicWall says it has no evidence any...
Vulnerabilities & Patching
The Hacker News
A pre-authenticated server-side request forgery flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 with a CVSS score of 10.0, was patched on October 6, 2026 in versions 12.4.3-03670 and 12.5.0-03082. Defused Cyber and Previdian detected...
Vulnerabilities & Patching
The Hacker News
Threat actors began exploiting a critical arbitrary file access flaw in Atlassian Data Center products, tracked as CVE-2026-21589 with a CVSS score of 9.3, affecting Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible,...
Vulnerabilities & Patching
The Hacker News
SonicWall warned of two vulnerabilities affecting its end-of-life Global Management System (GMS) 9.5.2 and earlier versions and said no remediation or security update will be released because the product has reached end-of-life. The alert follows by less...
Vulnerabilities & Patching