Approved changes feed: RSS · Atom

cpe:2.3:a:sonicwall:sma1000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSonicwall (28e2a9d1-aad2-54b9-a84d-b04e317de676)
ProductSma1000 (f2dec594-fa38-534e-bdf3-1c0b4a37bf0f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15410 vulnerable 2026-07-29 00:26:18.085399 Details available
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Published: 2026-07-14T19:43:03.226Z
Updated: 2026-07-16T03:55:20.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15409 vulnerable 2026-07-29 00:26:18.084834 Details available
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Published: 2026-07-14T19:39:34.808Z
Updated: 2026-07-16T03:55:19.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4116 vulnerable 2026-06-08 08:05:12.650543 Details available
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
Published: 2026-04-09T14:27:29.341Z
Updated: 2026-04-13T18:26:18.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4114 vulnerable 2026-06-08 08:05:12.644505 Details available
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
Published: 2026-04-09T14:25:41.059Z
Updated: 2026-05-10T13:19:33.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4113 vulnerable 2026-06-08 08:05:12.643645 Details available
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
Published: 2026-04-09T14:23:53.270Z
Updated: 2026-04-13T18:27:04.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4112 vulnerable 2026-06-08 08:05:12.632969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40602 vulnerable 2026-06-08 07:25:05.246818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-40595 vulnerable 2026-06-08 07:25:05.160544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2170 vulnerable 2026-06-08 07:16:56.144691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23006 vulnerable 2026-06-08 07:10:55.058388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45317 vulnerable 2026-06-08 06:45:55.871807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5132 vulnerable 2026-06-08 05:26:41.433627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5129 vulnerable 2026-06-08 05:26:41.422539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.