| CVE-2026-102258 |
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance…
|
6.1
Moyenne
|
7 oct. 2026 |
| CVE-2026-102257 |
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to…
|
7.2
Élevée
|
7 oct. 2026 |
| CVE-2026-102256 |
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
|
7.8
Élevée
|
7 oct. 2026 |
| CVE-2026-102255 |
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…
|
10.0
Critique
|
7 oct. 2026 |
| CVE-2026-83549 |
Exploitée
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
|
7.8
Élevée
|
1 sept. 2026 |
| CVE-2026-83548 |
Exploitée
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
|
10.0
Critique
|
1 sept. 2026 |
| CVE-2026-15410 |
Exploitée
SonicWall SMA1000 Appliances Code Injection Vulnerability
|
7.2
Élevée
|
14 juil. 2026 |
| CVE-2026-15409 |
Exploitée
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
|
10.0
Critique
|
14 juil. 2026 |
| CVE-2026-4116 |
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user…
|
7.2
Élevée
|
9 avr. 2026 |
| CVE-2026-4114 |
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN…
|
6.6
Moyenne
|
9 avr. 2026 |
| CVE-2026-4113 |
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker…
|
7.2
Élevée
|
9 avr. 2026 |
| CVE-2026-4112 |
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series…
|
7.2
Élevée
|
9 avr. 2026 |
| CVE-2025-40602 |
Exploitée
SonicWall SMA1000 Missing Authorization Vulnerability
|
6.6
Moyenne
|
18 déc. 2025 |
| CVE-2025-40595 |
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface
|
7.2
Élevée
|
14 mai 2025 |
| CVE-2025-2170 |
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface,…
|
7.2
Élevée
|
30 avr. 2025 |
| CVE-2025-23006 |
Exploitée
SonicWall SMA1000 Appliances Deserialization Vulnerability
|
9.8
Critique
|
23 janv. 2025 |
| CVE-2024-45317 |
A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier…
|
7.5
Élevée
|
11 oct. 2024 |
| CVE-2020-5132 |
SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as…
|
Non notée
|
30 sept. 2020 |
| CVE-2020-5129 |
A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP…
|
Non notée
|
26 mars 2020 |