CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-07-14. EPSS: 6.8% chance of exploitation in the next 30 days.

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Affected products

• SonicWall SMA6210 Firmware: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only
• SonicWall SMA7210 Firmware: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only
• SonicWall SMA8200V: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only

Published 2026-07-14. Last modified 2026-07-16.