CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability

High severity, CVSS 7.2. Actively exploited: in CISA KEV since 2026-07-14. EPSS: 11.8% chance of exploitation in the next 30 days.

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

Affected products

• SonicWall SMA6210 Firmware: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only
• SonicWall SMA7210 Firmware: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only
• SonicWall SMA8200V: version 12.4.3-03245 only; version 12.4.3-03387 only; version 12.4.3-03434 only; version 12.5.0-02283 only; version 12.5.0-02624 only; version 12.5.0-02800 only

Published 2026-07-14. Last modified 2026-07-16.