| CVE-2026-102258 |
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance…
|
6.1
Medium
|
Oct 7, 2026 |
| CVE-2026-102257 |
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to…
|
7.2
High
|
Oct 7, 2026 |
| CVE-2026-102256 |
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
|
7.8
High
|
Oct 7, 2026 |
| CVE-2026-102255 |
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…
|
10.0
Critical
|
Oct 7, 2026 |
| CVE-2026-83549 |
Exploited
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
|
7.8
High
|
Sep 1, 2026 |
| CVE-2026-83548 |
Exploited
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
|
10.0
Critical
|
Sep 1, 2026 |
| CVE-2026-15410 |
Exploited
SonicWall SMA1000 Appliances Code Injection Vulnerability
|
7.2
High
|
Jul 14, 2026 |
| CVE-2026-15409 |
Exploited
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
|
10.0
Critical
|
Jul 14, 2026 |
| CVE-2026-4116 |
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user…
|
7.2
High
|
Apr 9, 2026 |
| CVE-2026-4114 |
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN…
|
6.6
Medium
|
Apr 9, 2026 |
| CVE-2026-4113 |
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker…
|
7.2
High
|
Apr 9, 2026 |
| CVE-2026-4112 |
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series…
|
7.2
High
|
Apr 9, 2026 |
| CVE-2025-40602 |
Exploited
SonicWall SMA1000 Missing Authorization Vulnerability
|
6.6
Medium
|
Dec 18, 2025 |
| CVE-2025-40595 |
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface
|
7.2
High
|
May 14, 2025 |
| CVE-2025-2170 |
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface,…
|
7.2
High
|
Apr 30, 2025 |
| CVE-2025-23006 |
Exploited
SonicWall SMA1000 Appliances Deserialization Vulnerability
|
9.8
Critical
|
Jan 23, 2025 |
| CVE-2024-45317 |
A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier…
|
7.5
High
|
Oct 11, 2024 |
| CVE-2020-5132 |
SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as…
|
Not rated
|
Sep 30, 2020 |
| CVE-2020-5129 |
A vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote attacker to cause HTTP…
|
Not rated
|
Mar 26, 2020 |