SonicWall SMA1000

Name: SonicWall SMA1000
Brand: SonicWall

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high1medium0low

updated 2026-10-26

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-15410US	—OT critical	11.8% (96th)	KEV	no fix	2026-07-14	3 versions
CVE-2026-83549US	—OT critical	9.89% (96th)	KEV	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-83548US	—OT critical	8.04% (95th)	KEV	no fix	2026-09-01	≤ vers:unknown/*
CVE-2026-15409US	—OT critical	6.79% (94th)	KEV	no fix	2026-07-14	3 versions
CVE-2025-40602US	—OT critical	2.76% (86th)	KEV	no fix	2025-12-18	2 versions
CVE-2025-23006US	critical9.8OT critical	23.4% (98th)	KEV	no fix	2025-01-23	≤ 12.4.3-02804 (platform-hotfix) and earlier versions.
CVE-2026-102257US	—	0.65% (51st)	Exploit	no fix	2026-10-07	≤ vers:unknown/*
CVE-2026-4112US	—	0.53% (44th)	Exploit	no fix	2026-04-09	2 versions
CVE-2026-102256US	—	0.49% (42nd)	Exploit	no fix	2026-10-07	≤ vers:unknown/*
CVE-2026-102255US	—	0.48% (40th)	Exploit	no fix	2026-10-07	≤ vers:unknown/*
CVE-2026-102258US	—	0.39% (32nd)	Exploit	no fix	2026-10-07	≤ vers:unknown/*
CVE-2020-5129US	high7.5	1.30% (70th)	—	no fix	2020-03-26	≤ 12.1.0-06411 and earlier
CVE-2020-5132US	medium5.3	0.98% (62nd)	—	no fix	2020-09-30	≤ SMA1000 12.4.0-2223
CVE-2026-4114US	—	0.74% (54th)	—	no fix	2026-04-09	2 versions
CVE-2026-4116US	—	0.71% (53rd)	—	no fix	2026-04-09	2 versions
CVE-2026-4113US	—	0.60% (48th)	—	no fix	2026-04-09	2 versions
CVE-2024-45317US	—	0.58% (47th)	—	no fix	2024-10-11	≤ 12.4.3-02676 and earlier versions
CVE-2025-40595US	—	0.36% (28th)	—	no fix	2025-05-14	≤ 12.4.3-02925 (platform-hotfix) and earlier versions
CVE-2025-2170US	—	0.34% (26th)	—	no fix	2025-04-30	≤ 12.4.3-02907 (platform-hotfix) and earlier versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-176Improper Handling of Unicode Encoding2 CVEs
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-204Observable Response Discrepancy1 CVEs
CWE-248Uncaught Exception1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)13 CVEs
NLNCSC-NL (CSAF)8 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan