66 matches found
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102258
A post-authentication Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicWall SMA1000 appliance's Management Console (AMC) . Under specific conditions, a remote authenticated attacker with administrator privileges can store and execute arbitrary JavaScript code within the AMC. Thi...
EUVD-2026-94327
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-102257
The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
EUVD-2026-94326
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2025-40602
CVE-2025-40602 CVE-2025-40602는 SonicWall Secure Mobile Access SMA 1000 시리즈 어플라이언스의 어플라이언스 관리 콘솔AMC에서 발생하는 로컬 권한 상승 취약점입니다. 이 취약점은 AMC의 부적절한 인가로 인해 발생하며, 인증된 원격 공격자가 영향을 받는 장치에서 권한을 상승시킬 수 있도록 합니다. CVE-2025-23006과 연쇄적으로 사용되면 공격자는 인증 없이 루트 권한으로 원격 코드 실행을 달성할 수 있습니다. 이 제로데이 취약점은 실제 환경에서 활발히 악용되고 있으며...
CVE-2025-40602
CVE-2025-40602 📌 Aperçu CVE-2025-40602 est une vulnérabilité d'élévation de privilèges locale affectant les appliances de la série SonicWall Secure Mobile Access SMA 1000. Le défaut réside dans la console de gestion des appliances AMC en raison de vérifications d'autorisation insuffisantes ,...
EUVD-2026-69707
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
CVE-2026-83549: Improper Neutralization of Special Elements used in an OS Command
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...
Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware
...
Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.
SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...
EUVD-2026-44410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...