Skip to content
OpenAdvisories

Product · SonicWall

SMA1000

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-102258 Public exploit

    Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Manage…

    SonicWall SMA1000 Network devices
  • High 7.2
    CVE-2026-102257 Public exploit

    A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extra…

    SonicWall SMA1000 Network devices
  • High 7.8
    CVE-2026-102256 Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…

    SonicWall SMA1000 Network devices
  • Critical 10.0
    CVE-2026-102255 Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
  • High 7.8
    CVE-2026-83549 Exploited Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit Scanner template

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • High 7.2
    CVE-2026-15410 Exploited · Ransomware Public exploit EPSS 12%

    Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the …

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Critical 10.0
    CVE-2026-15409 Exploited · Ransomware Public exploit Scanner template

    A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • High 7.2
    CVE-2026-4112 Public exploit

    Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series applia…

    SonicWall SMA1000 Network devices
  • Medium 6.6
    CVE-2025-40602 Exploited Public exploit

    A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…

    SonicWall SMA1000 Network devices
    KEV Dec 17, 2025