SonicWall SMA1000 12.5.0-02952 AMC Archive Path Traversal Check

SonicWall SMA 1000 Series versions through 12.4.3-03526 and 12.5.0-02952 contain an AMC archive Zip Slip path traversal vulnerability. This tool performs offline version-evidence triage without contacting target systems...

SonicWall SMA1000 12.5.0-02952 AMC Cross Site Scripting

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a post-authentication AMC stored cross site scripting vulnerability. This offline checker assesses supplied version evidence without contacting a target or testing exploitability. https://packetstorm.news/download/237487...

Exploit for CVE-2026-102258

sonicwall-sma1000-cve-2026-102258-check St...

Exploit for CVE-2026-102257

sonicwall-sma1000-cve-2026-102257-check S...

PT-2026-121978

In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: cancel the client work on remove xe i2c notifier stores the DesignWare adapter in i2c-adapter and schedules i2c-work when the adapter is registered under the xe I2C platform device, and xe i2c client work then...

CVE-2026-102257

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257

The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...

EUVD-2026-94326

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

CVE-2026-102257: Improper Limitation of a Pathname to a Restricted Directory

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...

SonicWall SMA1000 CVE-2026-83549 RCE Chain Detect

Detects SMA1000 firmware branches vulnerable to CVE-2026-83549 when chained with CVE-2026-83548. Fingerprints WorkPlace/AMC build headers and flags pre-hotfix platform versions 12.4.3 before 03526, 12.5.0 before 02952. Does not invoke sysCtrl or inject SNMP trap commands. !/usr/bin/env python3 --...

EUVD-2026-69707

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

CVE-2026-83549

A post-authentication OS Command Injection vulnerability exists in the SonicWall SMA1000 Appliance Management Console (AMC) . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands, leading to remote code execution . The vulnerability is ac...

CVE-2026-83549: Improper Neutralization of Special Elements used in an OS Command

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

VulnCheck KEV: CVE-2026-83549

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...

CVE-2026-15410: Improper Control of Generation of Code

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

CVE-2026-32961

SD-330AC and AMC Manager provided by silex technology, Inc. contain a heap-based buffer overflow vulnerability in packet data processing of sxsmpd. Processing a crafted packet may cause a temporary denial-of-service DoS condition...

CVE-2026-32963

SD-330AC and AMC Manager provided by silex technology, Inc. contain a reflected cross-site scripting vulnerability. When a user logs in to the affected device and access some crafted web page, arbitrary script may be executed on the user's browser...