Lucene search
+L

26 matches found

Kitploit
Kitploit
•added 2026/10/01 11:58 a.m.•17 views

CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local en la consola de gestión del dispositivo AMC de los dispositivos SonicWall Secure Mobile Access SMA serie 1000. La vulnerabilidad se origina por una autorización insuficiente en la AMC, lo que permite a atacantes...

7.5AI score0.02756EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/10/01 11:35 a.m.•13 views

CVE-2025-40602

CVE-2025-40602 📌 Resumen CVE-2025-40602 es una vulnerabilidad de escalada de privilegios local que afecta a los dispositivos SonicWall Secure Mobile Access SMA 1000. El fallo existe en la Appliance Management Console AMC debido a controles de autorización insuficientes , lo que permite a un usuar...

7.8AI score0.02756EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•3 views

CVE-2026-83549: Improper Neutralization of Special Elements used in an OS Command

Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to...

7.8CVSS9AI score0.1076EPSS
SaveExploits3References4
GithubExploit
GithubExploit
•added 2026/07/17 5:30 p.m.•65 views

Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware

...

10CVSS6.7AI score0.11791EPSS
SaveExploits6
NCSC
NCSC
•added 2026/07/15 9:56 a.m.•25 views

Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.

SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...

10CVSS6.4AI score0.11791EPSS
SaveExploits6References1
EUVD
EUVD
•added 2026/07/14 9:32 p.m.•18 views

EUVD-2026-44410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2CVSS7.2AI score0.11791EPSS
SaveExploits2References3
NVD
NVD
•added 2026/07/14 8:16 p.m.•16 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2CVSS0.11791EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2026/07/14 7:43 p.m.•145 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

0.11791EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2026/07/14 7:43 p.m.•17 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2AI score0.11791EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/14 7:43 p.m.•25 views

CVE-2026-15410

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2AI score0.11791EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2026/07/14 12:00 a.m.•13 views

VulnCheck KEV: CVE-2026-15410

SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2CVSS8.3AI score0.11791EPSS
SaveIn wildExploits2References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•2 views

CVE-2026-15410: Improper Control of Generation of Code

Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...

7.2CVSS8.1AI score0.11791EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/12/19 11:25 a.m.•12 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS6.9AI score0.02756EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/18 12:30 p.m.•21 views

EUVD-2025-204255

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS6.5AI score0.02756EPSS
SaveExploits1References3
OSV
OSV
•added 2025/12/18 11:15 a.m.•23 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS5.8AI score0.02756EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/18 11:15 a.m.•18 views

CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

6.6CVSS0.02756EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2025/12/18 7:32 a.m.•356 views

Exploit for CVE-2025-40602

CVE-2025-40602 CVE-2025-40602 is a local privilege escalatio...

9.8CVSS7.9AI score0.23432EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/12/17 12:00 a.m.•23 views

PT-2025-51891

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 versions prior to 12.4.3-03245 and 12.5.0-02283 SonicWall SMA 100 series appliances affected versions not specified Description A local privilege escalation vulnerability exists in the SonicWall SMA1000 appliance management...

7.1CVSS7.7AI score0.02756EPSS
SaveExploits1References108
CISA KEV Catalog
CISA KEV Catalog
•added 2025/12/17 12:00 a.m.•37 views

SonicWall SMA1000 Missing Authorization Vulnerability

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console AMC of affected devices...

7AI score0.02756EPSS
SaveIn wildExploits1
VulnCheck KEV
VulnCheck KEV
•added 2025/12/17 12:00 a.m.•11 views

VulnCheck KEV: CVE-2025-40602

SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console AMC of affected devices...

7AI score0.02756EPSS
SaveIn wildExploits1References12
Rows per page
Query Builder