Product by SonicWall
SonicWall SMA1000
10 known vulnerabilities in SonicWall SMA1000 (SonicWall), 6 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
6
Actively exploited (KEV)
3
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability In CISA KEVRansomwarealso in 3 other products | 10.0 | |
| Critical | CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability In CISA KEVRansomwarealso in 5 other products | 9.8 | |
| Critical | CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability In CISA KEVRansomwarealso in 3 other products | 7.2 | |
| Critical | CVE-2026-83548 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability In CISA KEValso in 3 other products | 10.0 | |
| Critical | CVE-2026-83549 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability In CISA KEValso in 3 other products | 7.8 | |
| Critical | CVE-2025-40602 | SonicWall SMA1000 Missing Authorization Vulnerability In CISA KEValso in 5 other products | 6.6 | |
| High | CVE-2026-4112 | SonicWall SMA1000: SQL Injection | 7.2 | |
| Medium | CVE-2026-4114 | SonicWall SMA1000: Improper Handling of Unicode Encoding | 6.6 | |
| High | CVE-2026-4116 | SonicWall SMA1000: Improper Handling of Unicode Encoding | 7.2 | |
| High | CVE-2026-4113 | SonicWall SMA1000: Observable Response Discrepancy | 7.2 |
News
- SonicWall’s latest critical flaw indicates a security pattern, not another one-off bugcsoonline,
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Minersthehackernews,
- SonicWall reports two major security holes under active exploitcsoonline,
- Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chainthehackernews,
- SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attackssecurityweek,
- Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)cert-fr,