Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:sma1000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma1000 (f2dec594-fa38-534e-bdf3-1c0b4a37bf0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-83549 vulnerable 2026-10-13 12:28:37.857333 Details available
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
Published: 2026-09-01T21:28:50.717Z
Updated: 2026-09-21T13:07:29.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15410 vulnerable 2026-07-29 00:26:18.085399 Details available
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Published: 2026-07-14T19:43:03.226Z
Updated: 2026-08-04T03:56:15.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15409 vulnerable 2026-07-29 00:26:18.084834 Details available
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Published: 2026-07-14T19:39:34.808Z
Updated: 2026-08-04T03:56:14.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4116 vulnerable 2026-06-08 08:05:12.650543 Details available
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
Published: 2026-04-09T14:27:29.341Z
Updated: 2026-04-13T18:26:18.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4114 vulnerable 2026-06-08 08:05:12.644505 Details available
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
Published: 2026-04-09T14:25:41.059Z
Updated: 2026-05-10T13:19:33.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4113 vulnerable 2026-06-08 08:05:12.643645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4112 vulnerable 2026-06-08 08:05:12.632969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40602 vulnerable 2026-06-08 07:25:05.246818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40595 vulnerable 2026-06-08 07:25:05.160544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2170 vulnerable 2026-06-08 07:16:56.144691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23006 vulnerable 2026-06-08 07:10:55.058388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45317 vulnerable 2026-06-08 06:45:55.871807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5132 vulnerable 2026-06-08 05:26:41.433627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5129 vulnerable 2026-06-08 05:26:41.422539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.