77 matches found
CVE-2026-15409
🚨 CVE-2026-15409 SonicWall SMA1000 시리즈의 중요 인증되지 않은 SSRF SonicWall SMA1000 시리즈 어플라이언스에 영향을 미치는 중요 서버 측 요청 위조SSRF 취약점. 이 저장소는 취약점, 영향을 받는 제품, 기술 개요, 영향, 탐지 지침 및 완화 방법을 문서화합니다. 📖 개요 CVE-2026-15409 는 SonicWall SMA1000 시리즈 어플라이언스의 중요한 인증되지 않은 서버 측 요청 위조SSRF 취약점입니다. 이 결함은 원격 공격자가 어플라이언스가 내부 또는 외부 리소스에 ...
CVE-2026-15409-15410-Framework
1 CVE-2026-15409 | 2 CVE-2026-15410 SonicWall SMA1000 - SSRF → Erlang RCE → Root 권한 상승 익스플로잇 프레임워크 및 안전한 탐지 도구 승인된 보안 테스트 전용입니다. ⚖️ 법적 고지 및 책임 있는 사용 이 도구는 교육 및 승인된 침투 테스트 목적으로만 제공됩니다. 저자와 기여자는 이 소프트웨어로 인한 오용 또는 손해에 대해 책임을 지지 않습니다. 사용자는 테스트 전에 대상 소유자의 명시적인 서면 허가를 받았는지 확인할 전적인 책임이 있습니다. 컴퓨터 시스템에 대한...
CVE-2026-83548-SonicWall-SMA1000-Analysis
CVE-2026-83548 — SonicWall SMA1000 취약점 분석 실제 취약점, 잠재적 영향, 그리고 보안 팀이 문제를 탐지·수정·검증하는 방법을 살펴보는 사이버 보안 프로젝트입니다. 프로젝트 개요 이 프로젝트는 제 사이버 보안 학습 여정의 일부입니다. 저는 SonicWall SMA1000 시스템에 영향을 미치는 치명적인 취약점인 CVE-2026-83548 을 선택했습니다. 이 취약점이 무엇인지, 어떻게 악용될 수 있는지, 조직에 왜 중요한지, 그리고 방어자가 어떻게 대응할 수 있는지 조사했습니다. 이 프로젝트의 목표...
...[ More ]
This Metasploit module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read an...
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution RCE ...
Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.
SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain...
SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution
This module chains three issues in SonicWall SMA1000 appliances. An unauthenticated, absolute-form OPTIONS request makes the WorkPlace listener act as an unintended forward proxy CVE-2026-83548. The module uses this access and a vendor-installed CouchDB update handler to obtain read and write...
Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware
...
SonicWall SMA1000 Series SSRF Detection Tool
A safe detection tool for identifying CVE-2026-15409 affecting SonicWall SMA1000 Series appliances. The Python utility performs non-destructive checks by issuing requests to common application endpoints using an external test URL and reports indicators of possible server-side request forgery...
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery SSRF vulnerability CVE-2026-15409 CVSS 10.0 and the high-severity code injection vulnerability...
Zero-day vulnerabilities are exploited in SonicWall SMA1000 devices.
SonicWall has identified two vulnerabilities in the SonicWall SMA1000 appliance. The vulnerability with the identifier CVE-2026-15409 involves Server-Side Request Forgery SSRF in the Work Place interface, allowing an unauthorized attacker to send requests to the device to unintended locations. Th...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-15409 - A Server-side request forgery SSRF A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location. CVSS Score: 10...
SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution
This module exploits a Server-Side Request Forgery SSRF vulnerability in the SonicWall SMA1000 WorkPlace wsproxy service to access the internal Erlang distribution service. After authenticating using the known Erlang distribution cookie, the module invokes os:cmd/1 through Erlang RPC to execute...
PT-2026-58291
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 affected versions not specified sonicwall sma6210 firmware versions 12.4.3-03245 through 12.5.0-02624 sonicwall sma7210 firmware affected versions not specified sonicwall sma8200v affected versions not specified Description A...
CVE-2026-4116
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication...
CVE-2026-4112
Improper neutralization of special elements used in an SQL command “SQL Injection” in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator...