#sonicwall
5 articles
CVE-2026-109593: Unauthenticated File Read in SonicWall GMS
An unauthenticated attacker with network access to SonicWall GMS 9.5.2 and earlier may be able to read internal GMS files, potentially exposing sensitive information...
CVE-2026-83548 and CVE-2026-83549: Two SonicWall SMA1000 Flaws — Pre-Auth SSRF and Post-Auth Command Execution
Two vulnerabilities in the SMA1000 access gateway: one works without logging in, the other after logging in as administrator. Together they form a chain that is hard to ignore...
CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended lo...
CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS comma...
CVE-2026-4112: Critical Privilege Escalation Vulnerability in SonicWall SMA 1000 - Immediate Update Required
A privilege escalation vulnerability has been identified in SonicWall Secure Mobile Access (SMA) 1000 series devices. CVE-2026-4112 could allow a remote attacker to gain elevated privileges, potentially leading to system compromise and unauthorized access to network resources.