CVE-2026-102255 lets an unauthenticated attacker use an unintended access path in the SMA1000 WorkPlace interface to reach internal functions. CVSS 10.0, fixed in 12.4.3-03670 and 12.5.0-03082, with no workaround.