What is GHSA-xww4-pc4h-x9hj?

GHSA-xww4-pc4h-x9hj is a security advisory published by GitHub Security Advisories with Critical severity. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...

Which CVE IDs does GHSA-xww4-pc4h-x9hj cover?

GHSA-xww4-pc4h-x9hj covers the following CVE IDs: CVE-2026-102255. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xww4-pc4h-x9hj?

GHSA-xww4-pc4h-x9hj has a CVSS v3 base score of 10.0, published by GitHub Security Advisories.

GHSA-xww4-pc4h-x9hjCriticalCVSS 10.0

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...

Vendor

GitHub Security Advisories

Published

October 7, 2026

Last Modified

October 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-102255 →

📋 Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and reach internal functionality and perform unauthorized operations.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-102255
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017
https://github.com/advisories/GHSA-xww4-pc4h-x9hj