18 matches found
CVE-2026-83548-checker
SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 暴露检测器 一个非侵入式 检测脚本,用于检测受 CVE-2026-83548 (Work Place 接口中的预认证 SSRF,CVSS 10.0)和 CVE-2026-83549 (AMC 中的认证后 OS 命令注入,CVSS 7.8)影响的 SonicWall Secure Mobile Access SMA 1000 系列设备——这两个被积极利用的零日漏洞可被串联以实现未认证 RCE。 这是一个补丁状态 / 暴露检查 ,而非漏洞利用工具。它仅执行只读的 HTTPS GET 请求...
Exploit for Server-Side Request Forgery in Sonicwall Sma8200V
SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure...
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution RCE ...
Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.
SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-83548
A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface due to an unintended alternate access path. This critical vulnerability (CVSS 10.0 ) allows a remote, unauthenticated attacker to gain unauthorized access to sensit...
VulnCheck KEV: CVE-2026-83548
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...
PT-2026-84518
Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description A pre-authentication Server-Side Request Forgery SSRF issue exists in the Work Place interface. This occurs due to an unintended alternate access path, allowing a remote...
CVE-2026-83548: Server-Side Request Forgery (SSRF)
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-15409
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...
CVE-2026-15409
A critical Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface (specifically affecting models SMA 6210, SMA 7210, and SMA 8200v ). The flaw allows unauthenticated remote attackers to tunnel through the /wsproxy endpoint to reach internal...
CVE-2026-15409
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...
VulnCheck KEV: CVE-2026-15409
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location...
CVE-2026-15409: Server-Side Request Forgery (SSRF)
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...
CVE-2025-40595: Server-Side Request Forgery (SSRF)
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...
CVE-2025-2170
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location...
CVE-2025-2170: Server-Side Request Forgery (SSRF)
A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location...