Paper/Archive/CVE-2026-15409

CVE-2026-15409

SonicWall SMA1000 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

KEV · due 17 Jul ransomware use EPSS 7%public exploit SSVC act CVSS 10.0

CVSS 10.0 (ADP)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 94.0.940 × 2018.8 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Affected

ProductAffectedFixed inSource

SMA100012.4.3-03245 – 12.4.3-03434–CNA

SMA100012.5.0-02283 – 12.5.0-02800–CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15409 kevcisa.gov/known-exploited-vulnerabilities-catalog