SonicWall SMA1000 vulnerabilities

6 CVEs affecting SonicWall SMA1000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-102258, published 2026-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-102257, published 2026-10-07. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted…
CVE-2024-45317, published 2024-10-11. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3-02676 and earlier allows a remote, unauthenticated attacker to cause the SMA1000 server-side…
CVE-2026-102256, published 2026-10-07. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions…
CVE-2026-102255, published 2026-10-07. Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could…
CVE-2026-102258, published 2026-10-07. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a…
CVE-2025-40595, published 2025-05-14. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially…