exploit/linux/http/sonicwall_sma1000_couchdb_rce

weaponized

SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution

view exploit source metasploittype exploitpublished 2026-09-01catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-83549US	—OT critical	9.89% (96th)	KEV	2026-09-01
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management…
CVE-2026-83548US	—OT critical	8.04% (95th)	KEV	2026-09-01
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could pot…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.