Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-15409 1 Sonicwall 1 Sma1000 2026-08-01 10 Critical
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
CVE-2026-15410 1 Sonicwall 1 Sma1000 2026-08-01 7.2 High
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.