CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE через WebSocket-прокси Эксплойт Proof-of-Concept для CVE-2026-15409 – неаутентифицированное удалённое выполнение кода на устройствах серии SonicWall SMA 1000 через протокол распределения Erlang, туннелируемый через WebSocket. 📖 Обзор CVE-2026-15409...

CVE-2026-83548-checker

SonicWall SMA 1000 — Детектор уязвимостей CVE-2026-83548 / CVE-2026-83549 Неинтрузивный скрипт обнаружения для устройств SonicWall Secure Mobile Access SMA 1000, затронутых уязвимостями CVE-2026-83548 SSRF до аутентификации в интерфейсе Work Place, CVSS 10.0 и CVE-2026-83549 внедрение OS-команд...

CVE-2025-40602

CVE-2025-40602 📌 Aperçu CVE-2025-40602 est une vulnérabilité d'élévation de privilèges locale affectant les appliances de la série SonicWall Secure Mobile Access SMA 1000. Le défaut réside dans la console de gestion des appliances AMC en raison de vérifications d'autorisation insuffisantes ,...

SonicWall-SMA1000-Zero-Day-IoC-Check

SonicWall SMA1000 제로데이 IoC 점검 적극적으로 악용되고 있는 SonicWall SMA 1000 시리즈 취약점 CVE-2026-15409 및 CVE-2026-15410 과 관련된 선별된 침해 지표IoC를 확인하기 위한 비공식 Bash 기반 로그 점검 스크립트입니다. !CAUTION 독립 커뮤니티 프로젝트: 이 저장소는 SonicWall 또는 독일 연방정보보안청BSI과 제휴, 보증, 유지관리 또는 지원 관계에 있지 않습니다. !IMPORTANT 이 스크립트는 제한된 탐지 보조 도구입니다. 결과가 깨끗하다고 해서...

rapid7-CVE-2026-15409

CVE-2026-15409 Этот репозиторий содержит эксплойт доказательства концепции для CVE-2026-15409. Он устанавливает удалённое выполнение кода без прав root на SonicWall SMA 1000, реализуя протокол Erlang, ожидаемый на localhost:1050, и туннелируя его через веб-сокет для чтения/записи файлов и...

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access SMA 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -...

Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

CVE-2026-15409 This repo contains a proof-of-concept exploi...

The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

CVE-2026-4112

Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...

VulnCheck KEV: CVE-2025-40602

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console AMC of affected devices...

SonicWall SMA 1000 Series < 12.4.3-02963 SSRF (SNWLID-2025-0010)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a server-side request forgery SSRF vulnerability. An SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cau...

SonicWall SMA 1000 Series < 12.4.3-02854 Pre-authentication Remote Command Execution (SNWLID-2025-0002)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a pre-authentication remote command execution vulnerability: - Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console AMC and Central Managemen...

The vulnerability of SonicWall SMA 1000 network firewall software lies in the redirection of URLs to unreliable websites, allowing attackers to redirect users to arbitrary URL addresses.

The vulnerability of SonicWall SMA 1000 network firewall microprogramming software relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address using a specially created link...