CVE-2026-15409

🚀 CVE-2026-15409 – RCE en Erlang en SonicWall SMA 1000 a través del proxy WebSocket Exploit de prueba de concepto para CVE-2026-15409 – ejecución remota de código no autenticada en los dispositivos de la serie SonicWall SMA 1000 a través del protocolo de distribución de Erlang tunelizado sobre...

rapid7-CVE-2026-15409

CVE-2026-15409 Dieses Repository enthält einen Proof-of-Concept-Exploit für CVE-2026-15409. Er ermöglicht Remote-Codeausführung ohne Root-Rechte auf SonicWall SMA 1000, indem er das von localhost:1050 erwartete Erlang-Protokoll implementiert und es über den WebSocket tunnelt, um...

CVE-2025-40602

CVE-2025-40602 📌 Panoramica CVE-2025-40602 è una vulnerabilità di escalation dei privilegi locale che colpisce i dispositivi della serie SonicWall Secure Mobile Access SMA 1000. Il difetto è presente nella Appliance Management Console AMC a causa di controlli di autorizzazione insufficienti , che...

SonicWall-SMA1000-Zero-Day-IoC-Check

Controllo IoC Zero-Day SonicWall SMA1000 Un controllo dei log non ufficiale basato su Bash per selezionati indicatori di compromissione associati alle vulnerabilità SonicWall SMA 1000 Series attivamente sfruttate CVE-2026-15409 e CVE-2026-15410. !CAUTION Progetto comunitario indipendente: Questo...

The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

CVE-2026-4112

Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...

VulnCheck KEV: CVE-2025-40602

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console AMC...

SonicWall SMA 1000 Series < 12.4.3-02963 SSRF (SNWLID-2025-0010)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a server-side request forgery SSRF vulnerability. An SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cau...

SonicWall SMA 1000 Series < 12.4.3-02854 Pre-authentication Remote Command Execution (SNWLID-2025-0002)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a pre-authentication remote command execution vulnerability: - Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console AMC and Central Managemen...