Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/10/02 5:20 a.m.•15 views

CVE-2026-83548-checker

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 暴露检测器 一个非侵入式 检测脚本,用于检测受 CVE-2026-83548 (Work Place 接口中的预认证 SSRF,CVSS 10.0)和 CVE-2026-83549 (AMC 中的认证后 OS 命令注入,CVSS 7.8)影响的 SonicWall Secure Mobile Access SMA 1000 系列设备——这两个被积极利用的零日漏洞可被串联以实现未认证 RCE。 这是一个补丁状态 / 暴露检查 ,而非漏洞利用工具。它仅执行只读的 HTTPS GET 请求...

10CVSS8.7AI score0.1076EPSS
SaveExploits3References1
GithubExploit
GithubExploit
•added 2026/09/04 4:30 p.m.•32 views

Exploit for Server-Side Request Forgery in Sonicwall Sma8200V

SonicWall SMA 1000 — CVE-2026-83548 / CVE-2026-83549 Exposure...

10CVSS9.1AI score0.1076EPSS
SaveExploits3
Rapid7 Blog
Rapid7 Blog
•added 2026/09/02 4:58 p.m.•11 views

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution RCE ...

10CVSS8.9AI score0.1076EPSS
SaveExploits3
NCSC
NCSC
•added 2026/09/02 9:51 a.m.•46 views

Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.

SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...

10CVSS8AI score0.1076EPSS
SaveExploits3References1
NVD
NVD
•added 2026/09/01 10:17 p.m.•41 views

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

10CVSS0.08757EPSS
SaveExploits3References2
Cvelist
Cvelist
•added 2026/09/01 9:25 p.m.•138 views

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

0.08757EPSS
SaveExploits3References1
CVE
CVE
•added 2026/09/01 9:25 p.m.•289 views

CVE-2026-83548

A pre-authentication Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface due to an unintended alternate access path. This critical vulnerability (CVSS 10.0 ) allows a remote, unauthenticated attacker to gain unauthorized access to sensit...

10CVSS8.4AI score0.08757EPSS
SaveIn wildExploits3References2Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2026/09/01 12:00 a.m.•10 views

VulnCheck KEV: CVE-2026-83548

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...

10CVSS8.6AI score0.08757EPSS
SaveIn wildExploits3References7
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•37 views

PT-2026-84518

Name of the Vulnerable Software and Affected Versions SonicWall SMA1000 Appliances affected versions not specified Description A pre-authentication Server-Side Request Forgery SSRF issue exists in the Work Place interface. This occurs due to an unintended alternate access path, allowing a remote...

10CVSS8.2AI score0.08757EPSS
SaveExploits3References117
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•3 views

CVE-2026-83548: Server-Side Request Forgery (SSRF)

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...

10CVSS8.6AI score0.08757EPSS
SaveExploits3References5
attackerkb
attackerkb
•added 2026/07/14 7:39 p.m.•26 views

CVE-2026-15409

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...

10CVSS7AI score0.06795EPSS
SaveIn wildExploits5References4Affected Software1
CVE
CVE
•added 2026/07/14 7:39 p.m.•591 views

CVE-2026-15409

A critical Server-Side Request Forgery (SSRF) vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface (specifically affecting models SMA 6210, SMA 7210, and SMA 8200v ). The flaw allows unauthenticated remote attackers to tunnel through the /wsproxy endpoint to reach internal...

10CVSS8AI score0.06795EPSS
SaveIn wildExploits5References2Affected Software1
Cvelist
Cvelist
•added 2026/07/14 7:39 p.m.•149 views

CVE-2026-15409

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...

0.06795EPSS
SaveExploits5References1
VulnCheck KEV
VulnCheck KEV
•added 2026/07/14 12:00 a.m.•16 views

VulnCheck KEV: CVE-2026-15409

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location...

10CVSS8.6AI score0.06795EPSS
SaveIn wildExploits5References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•1 views

CVE-2026-15409: Server-Side Request Forgery (SSRF)

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...

10CVSS8.2AI score0.06795EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/14 12:00 a.m.•5 views

CVE-2025-40595: Server-Side Request Forgery (SSRF)

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location...

7.2CVSS7AI score0.00355EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/30 7:15 p.m.•17 views

CVE-2025-2170

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location...

7.2CVSS5.8AI score0.00337EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/30 12:00 a.m.•1 views

CVE-2025-2170: Server-Side Request Forgery (SSRF)

A Server-side request forgery SSRF vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location...

7.2CVSS7AI score0.00337EPSS
SaveExploits0References1
Rows per page
Query Builder