SonicWall SMA1000 - Server-Side Request Forgery
CVE-2026-15409
Verified
Description
SMA1000 Appliance Work Place interface contains a server side request forgery caused by improper request validation, letting remote unauthenticated attackers make requests to unintended locations, exploit requires no special privileges.
Severity
Critical
CVSS Score
10
Exploit Probability
7%
Affected Product
sma1000
Published Date
July 17, 2026
Template Author
dhiyaneshdk, rapid7
CVE-2026-15409.yaml
10.0Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVE ID:
cve-2026-15409
CWE ID:
cwe-918
References
https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410/https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-15409https://github.com/remmons-r7/rapid7-CVE-2026-15409
Remediation Steps
Update to the latest version.