CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-862, CWE-250

Description

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Produits et versions touchés

Produit	Versions touchées	Corrigé en
SMA1000	Versions non publiées

Autres CVE de SMA1000

Les 19 CVE de SMA1000 →

CVE-2026-102258 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance… 6.1 Moyenne CVE-2026-102257 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to… 7.2 Élevée CVE-2026-102256 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')… 7.8 Élevée CVE-2026-102255 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended… 10.0 Critique