77 matches found
CVE-2026-15409-15410-Framework
1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc エクスプロイトフレームワーク & 安全な検出ツール ! 倫理的な使用のみ - 許可されたテスト このリポジトリは、許可されたセキュリティ専門家、ブルーチーム、ペネトレーションテスター専用のツールを提供します。 コンピュータシステムへの不正アクセスは、CFAA（米国）、Computer Misuse Act（英国）、TCK 243/244（トルコ）、および世界中の同様の法律 の下で違法です。 脆弱性の概要 CVE-...
CVE-2026-83548-SonicWall-SMA1000-Analysis
CVE-2026-83548 — SonicWall SMA1000 漏洞分析 一个探索真实世界漏洞、其潜在影响以及安全团队如何检测、修复和验证该问题的网络安全项目。 项目概述 本项目是我网络安全学习旅程的一部分。 我选择了 CVE-2026-83548 ，这是一个影响 SonicWall SMA1000 系统的严重漏洞。我研究了该漏洞是什么、它可能如何被利用、为什么对组织很重要，以及防御者应如何应对。 我开展此项目的目标是理解网络安全专业人员如何分析真实世界的漏洞，并以清晰、简单的方式传达安全风险。 快速概览 详情| 信息 ---|--- CVE| CVE-2026-83548 厂商|...
CVE-2026-15409
🚨 CVE-2026-15409 SonicWall SMA1000 シリーズにおける重大な非認証 SSRF SonicWall SMA1000 シリーズアプライアンスに影響を与える重大なサーバーサイドリクエストフォージェリ SSRF の脆弱性。 このリポジトリは、脆弱性の詳細、影響を受ける製品、技術概要、影響、検出ガイダンス、および修復方法を文書化しています。 📖 概要 CVE-2026-15409 は、SonicWall SMA1000 シリーズ アプライアンスにおける 重大な非認証のサーバーサイドリクエストフォージェリ SSRF の脆弱性です。...
...[ More ]
This Metasploit module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read an...
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution RCE ...
Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.
SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...
SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution
This module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read and write...
Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware
...
SonicWall SMA1000 Series SSRF Detection Tool
A safe detection tool for identifying CVE-2026-15409 affecting SonicWall SMA1000 Series appliances. The Python utility performs non-destructive checks by issuing requests to common application endpoints using an external test URL and reports indicators of possible server-side request forgery...
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...
Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.
SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-15409 - A Server-side request forgery SSRF A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location. CVSS Score: 10...
SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution
This module exploits a Server-Side Request Forgery SSRF vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to execute...
PT-2026-58291
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 affected versions not specified sonicwall sma6210 firmware versions 12.4.3-03245 through 12.5.0-02624 sonicwall sma7210 firmware affected versions not specified sonicwall sma8200v affected versions not specified Description A...
CVE-2026-4116
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
CVE-2026-4112
Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...