SonicWall SMA1000 vulnerability CVE-2026-102255 (CVSS 10) allows pre-auth SSRF. Three more flaws fixed. Upgrade to 12.5.0-03082 now.
SMA1000
CVE-2026-83548, a critical SonicWall SMA1000 vulnerability, is exploited in the wild. The pre-authentication SSRF flaw scores a maximum 10.0 CVSS.
SonicWall SMA1000 vulnerability CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Public PoC enables remote code execution patch now.
SonicWall SMA1000 SSRF flaw CVE-2026-15409 (CVSS 10.0) is exploited in the wild. Upgrade to hotfix 12.4.3-03453 or 12.5.0-02835 now.
SonicWall warns of zero-day attacks chaining CVE-2025-40602 and CVE-2025-23006 to gain unauthenticated root access on SMA1000 appliances. Patch now!
SonicWall fixes CVE-2025-40595, a high-severity SSRF flaw in SMA1000 appliances. Patch now to block remote encoded URL exploitation.
SonicWall fixes CVE-2025-2170, an SSRF flaw in SMA1000 appliances. Users urged to update to platform-hotfix 12.4.3-02925 or later to stay secure.
Learn about the CVE-2024-53704 vulnerability in SonicWall firewalls and its severe impact on network security and data protection.
SonicWall warns of critical vulnerability CVE-2025-23006 in SMA1000 AMC and CMC. Attackers can exploit this pre-authentication remote command execution flaw.