rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...

Zoom Workplace VDI Client 7.0.11 < 7.0.13 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...

Zoom Workplace 7.0.x < 7.1.9 / 7.2.0 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace installed on the remote host is 7.0.x prior to 7.1.9 / 7.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53420

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53420

A buffer overflow vulnerability exists in a Zoom Phone feature within Zoom Workplace Clients . This issue, categorized as CWE-120 (Buffer Copy without Checking Size of Input), could allow an unauthenticated user to perform an elevation of privilege via network access . The CVSS 3.1 score is 8.0 (...

CVE-2026-53418

The Zoom Workplace for Android application, specifically versions before 7.2.1 , is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). This flaw may allow an unauthenticated user to perform an escalation of privilege via network access . The CVSS 3.1 score is 8.1 (Hi...

CVE-2026-53418

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

Zoom Workplace 7.0.5 < 7.2.0 Vulnerability (ZSB-26022)

The version of Zoom Workplace installed on the remote host is between 7.0.5 and 7.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26022 advisory. - Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to...

CVE-2026-53420: Buffer Copy without Checking Size of Input

Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...

CVE-2026-53418: Improper Authorization in Handler for Custom URL Scheme

Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege via network access...

PT-2026-111594

Name of the Vulnerable Software and Affected Versions Zoom Workplace Clients affected versions not specified Description A buffer overflow exists within a Zoom Phone feature of Zoom Workplace Clients. This flaw allows an unauthenticated user to perform a privilege escalation via network access. A...

SonicWall SMA1000 SRF Unauthorized Access

The vulnerability of the Appliance WorkPlace microprogramming-based network interface of SonicWall SMA1000 relates to the possibility of bypassing access control mechanisms. Exploiting this vulnerability allows a malicious actor to execute an SRF attack and gain unauthorized access to protected...

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall...

SonicWall SMA1000 WorkPlace SSRF (CVE-2026-83548)

Exploits CVE-2026-83548 in SonicWall SMA1000 WorkPlace: unauthenticated absolute-form OPTIONS requests are forwarded to loopback CouchDB, enabling internal database access and downstream RCE chains. !/usr/bin/env python3 -- coding: utf-8 -- """SonicWall SMA1000 WorkPlace SSRF to CouchDB...

SonicWall SMA1000 CVE-2026-83548 SSRF Detect

Detects CVE-2026-83548 in SonicWall SMA1000 WorkPlace before hotfixes 12.4.3-03526 / 12.5.0-02952. Sends an unauthenticated absolute-form OPTIONS request that WorkPlace forwards to loopback CouchDB; a 405 methodnotallowed JSON body confirms the SSRF primitive. !/usr/bin/env python3 -- coding: utf...

SonicWall SMA1000 CVE-2026-83549 RCE Chain Detect

Detects SMA1000 firmware branches vulnerable to CVE-2026-83549 when chained with CVE-2026-83548. Fingerprints WorkPlace/AMC build headers and flags pre-hotfix platform versions 12.4.3 before 03526, 12.5.0 before 02952. Does not invoke sysCtrl or inject SNMP trap commands. !/usr/bin/env python3 --...

LinkedIn adds new checks for fake profiles and work histories

LinkedIn is adding trust and verification features aimed at making fake professional identities, invented work histories, and company impersonation harder to pull off. The company is responding to an environment in which generative AI enables imposters to create an entirely made-up professional...