CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SMA1000 Work Place Pre-Authentication Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-83548)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface
SonicWall SMA1000 Work Place Unauthenticated Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-15409)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE
[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface
SonicWall SMA1000 AMC and CMC Pre-Authentication Remote Code Execution (RCE) Vulnerability (CVE-2025-23006) Security Advisory
[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)
[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system
[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles