CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SonicWall SMA1000 Appliance Management Console (AMC) OS Command Injection and RCE Vulnerability (CVE-2026-83549) Advisory
[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) management interface
[Impact] A remote authenticated attacker with administrator privileges can execute arbitrary OS commands under specific conditions, leading to complete system compromise
[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict access to the AMC management interface
SonicWall SMA1000 Work Place Pre-Authentication Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-83548)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise
[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface
SonicWall SMA1000 Appliance Management Console (AMC) Remote Code Execution and OS Command Injection (CVE-2026-15410)
[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)
[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands under specific conditions, potentially leading to full system compromise
[Mitigation] Immediately apply the latest firmware patches provided by SonicWall and restrict external access to the management console
SonicWall SMA1000 Work Place Unauthenticated Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-15409)
[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface
[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE
[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface