FR

live

CVE-2025-15662 · CVSS 8.6 CVE-2025-50455 · CVSS 9.1 CVE-2025-59172 · CVSS 8.5 CVE-2025-68686 · Fortinet FortiOS

vendor

SonicWall

2: vulnerabilities tracked
2: under active exploitation
1: critical
14 July 2026: latest publication

cve

Vulnerability watch

idvulnerabilityseveritypublished

CVE-2026-15409A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.SonicWall SMA1000 Appliances Critical CVSS 10 14/07 CVE-2026-15410Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.SonicWall SMA1000 Appliances Critical CVSS 7.2 14/07