Skip to content
Sign in
7.2 High

CVE-2025-40595 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface

Description

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Affected products and versions

Product Affected versions Fixed in
SMA1000 Versions not published

Other CVEs of SMA1000

The 19 CVEs of SMA1000 →
CVE-2026-102258 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance… 6.1 Medium CVE-2026-102257 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to… 7.2 High CVE-2026-102256 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')… 7.8 High CVE-2026-102255 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended… 10.0 Critical
Track this CVE