CVE-2026-15409

🚨 CVE-2026-15409 Critical Unauthenticated SSRF in SonicWall SMA1000 Series Critical Server-Side Request Forgery SSRF vulnerability affecting SonicWall SMA1000 Series appliances. This repository documents the vulnerability, affected products, technical overview, impact, detection guidance, and...

SonicWall SMA1000 LFI

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. id: CVE-2023-0126 info: name: SonicWall SMA1000 LFI author: tess severity: high description...

CVE-2026-15409-15410-Framework

1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root Privesc Exploit Framework & Safe Detection Tool ! Ethical Use Only - Authorized Tests This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized acces...

CVE-2026-83548-SonicWall-SMA1000-Analysis

CVE-2026-83548 — SonicWall SMA1000 Vulnerability Analysis A cybersecurity project exploring a real-world vulnerability,its potential impact,and how security teams can detect,fix,and verify the issue. Project Overview This project is part of my cybersecurity learning journey. I selected...

SonicWall SMA1000 Code Execution

The vulnerability in the SonicWall SMA1000 firewall software relates to improper handling of special elements. Exploitation of this vulnerability may allow an attacker to execute arbitrary code...

SonicWall SMA1000 Web Interface Code Execution

The vulnerability in the web interface of the SonicWall SMA1000 microprogramming software management system is related to improper validation of the path name for the directory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

SonicWall SMA1000 12.5.0-02952 Server-Side Request Forgery Checker

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a server-side request forgery vulnerability. This offline tool evaluates reported build strings against vendor-provided affected and fixed version boundaries...

SonicWall SMA1000 12.5.0-02952 Check

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain an authenticated remote code execution vulnerability. This offline tool assesses operator-supplied version evidence without contacting targets or testing exploitability. https://packetstorm.news/download/237489...

SonicWall SMA1000 12.5.0-02952 AMC Cross Site Scripting

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a post-authentication AMC stored cross site scripting vulnerability. This offline checker assesses supplied version evidence without contacting a target or testing exploitability. https://packetstorm.news/download/237487...

SonicWall SMA1000 12.5.0-02952 Pre-Authentication Server-Side Request Forgery

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a pre-authentication server-side request forgery vulnerability in the WorkPlace interface...

SonicWall SMA1000 12.5.0-02952 Cross Site Scripting

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a post-authentication stored cross site scripting vulnerability in the Appliance Management Console...

SonicWall SMA1000 12.5.0 OS Command Injection

SonicWall SMA1000 versions 12.4.3-03526 and earlier and 12.5.0-02952 and earlier contain an authenticated administrator OS command injection vulnerability that may result in remote code execution...

Exploit for CVE-2026-102258

sonicwall-sma1000-cve-2026-102258-check St...

Exploit for CVE-2026-102257

sonicwall-sma1000-cve-2026-102257-check S...

Exploit for CVE-2026-102256

sonicwall-sma1000-cve-2026-102256-check Sta...

Exploit for CVE-2026-102255

sonicwall-sma1000-cve-2026-102255-check Stand...

Exploit for Confused Deputy in Sonicwall Sma8200V

CVE-2026-83548 — SonicWall SMA1000 Unauthenticated SSRF CVSS 10...

SonicWall SMA1000 SRF Unauthorized Access

The vulnerability of the Appliance WorkPlace microprogramming-based network interface of SonicWall SMA1000 relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute an SRF attack and gain unauthorized access to protected...

SonicWall SMA 1000 Series <= 12.4.3-03526 / 12.5.x <= 12.5.0-02952 Multiple Vulnerabilities (SNWLID-2026-0017)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote,...

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall...