51 matches found
CVE-2019-7482
Múltiples vulnerabilidades en los dispositivos SonicWall SMA/SRA CVE-2019-7481, CVE-2019-7482,CVE-2019-7483, CVE-2019-7484, CVE-2019-7485, CVE-2019-7486 Publicado por primera vez: 26 Feb 2020 14:00 GMT Estado: En desarrollo Última actualización: 26 Feb 2020 14:00 GMT Puntuación CVSS: 9.8 Resumen ...
watchTowr-vs-SonicWall-PreAuth-RCE-Chain
SonicWall SMA 100 PreAuth RCE Chain PoC PoC para SonicWall SMA 100 PreAuth RCE Chain CVE-2023-44221, CVE-2024-38475 Consulta nuestra entrada de blog para obtener detalles técnicos https://github.com/user-attachments/assets/b157b39c-d7bd-4385-af7a-e465f8fd4a41 PoC en acción root@kitploit: python...
CVE-2026-15409
🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...
CVE-2026-83548-checker
SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure Detector A non-intrusive detection script for SonicWall Secure Mobile Access SMA 1000 series appliances affected by CVE-2026-83548 pre-auth SSRF in the Work Place interface, CVSS 10.0 and CVE-2026-83549 post-auth OS command injection i...
CVE-2025-40602
CVE-2025-40602 📌 Resumen CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local que afecta a los dispositivos SonicWall Secure Mobile Access SMA 1000. El fallo existe en la Appliance Management Console AMC debido a controles de autorización insuficientes , lo que permite a un usuar...
CVE-2026-4112
SonicWall SMA 8200v: Privilege Escalation via Cross-Parameter Blind SQL Injection Firmware: 12.5.0-02283 Platform Hotfix on 12.5.0-02002 Base SonicWall Advisory 1. Summary A post-authentication blind SQL injection vulnerability in the SonicWall SMA 8200v management console port 8443 allows any...
cve-2024-53703-poc
cve-2024-53703-poc PoC para explotar CVE-2024-53703, un desbordamiento de búfer basado en la pila en SonicWall SMA modhttprp.so...
CVE-2025-40602
CVE-2025-40602 CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local en la consola de gestión del dispositivo AMC de los dispositivos SonicWall Secure Mobile Access SMA serie 1000. La vulnerabilidad se origina por una autorización insuficiente en la AMC, lo que permite a atacantes...
patch-CVE-2026-06555
Patch: CVE-2026-06555 Vulnerability Details CVE : CVE-2026-06555 Product : SonicWall SMA Description : Path traversal Severity : High Patch Status: DEPLOYED...
SonicWall-SMA1000-Zero-Day-IoC-Check
SonicWall SMA1000 Zero-Day IoC Check An unofficial Bash-based log check for selected indicators of compromise associated with the actively exploited SonicWall SMA 1000 Series vulnerabilities CVE-2026-15409 and CVE-2026-15410. !CAUTION Independent community project: This repository is not affiliat...
rapid7-CVE-2026-15409
CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...
Exploit for Server-Side Request Forgery in Sonicwall Sma8200V
SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure...
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...
SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)
The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access SMA 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
OpenSSH Security Auditor regreSSHion & 2026 Flaws A lightwe...
The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.
The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...
Exploit for Race Condition in Sonicwall Sma_6200_Firmware
CVE-2024-6387 CVE-2024-6387 POC Currently being edited...
CVE-2026-4112
Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...
