FR
live
Critical CVSS 10 Actively exploited

CVE-2026-15409

SonicWall SMA1000 Appliances

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

What this means

Exposure
Exploitable remotely over the network, without authentication and with no action from the victim.
Impact
An attacker can read sensitive data, modify or destroy data and take the service offline. The impact spreads beyond the vulnerable component into other parts of the system.
Weakness
The server issues a request to an attacker-chosen address, reaching into the internal network (SSRF).
Likelihood
Exploitation is not hypothetical: CISA has observed it in the wild.

What to doTop priority: CISA sets the remediation deadline at 17 July 2026. Start with the instances exposed to the internet.

Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.

Published
14 July 2026
CVSS
10 (v3.1) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS
78.44% probability of exploitation within 30 days · above 100% of all CVEs
Weakness
CWE-918
CISA due date
17 July 2026 past due
Sources
nvd · cisa-kev
References

Type at least two characters.

navigate open esc dismiss