Skip to main content

SMA1000 Appliances vulnerabilities

5 published alerts for SonicWall SMA1000 Appliances.

Actively exploited (KEV)

CVE-2026-83549

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-83549). SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. CISA remediation due date: 2026-09-05. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)

CVE-2026-83548

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-83548). SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations. CISA remediation due date: 2026-09-05. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2026-15410

SonicWall SMA1000 Appliances Code Injection Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15410). SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands. CISA remediation due date: 2026-07-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2026-15409

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-15409). SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. CISA remediation due date: 2026-07-17. If you need help checking exposure, call (864) 335-9223.

Actively exploited (KEV)Ransomware

CVE-2025-23006

SonicWall SMA1000 Appliances Deserialization Vulnerability

SonicWall SMA1000 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-23006). SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands. CISA remediation due date: 2025-02-14. If you need help checking exposure, call (864) 335-9223.