Known vulnerabilities in SonicWall SMA 1000 12.4.3-03453

Known vulnerabilities in SonicWall SMA 1000 12.4.3-03453

Vendor: SonicWall

Software: SonicWall SMA 1000

Version: 12.4.3-03453

Software CPE: cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*

Website: https://www.sonicwall.com/

Total vulnerabilities: 6

Public exploits: 2

Known exploited (KEV): 2

Vulnerabilities by Severity

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU153400 - Server-Side Request Forgery (SSRF) CVE-2026-102255	CWE-918	High	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-102256	CWE-78	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153402 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-102257	CWE-22	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-102258	CWE-79	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU146659 - Server-Side Request Forgery (SSRF) CVE-2026-83548	CWE-918	Critical	Public exploit available	Exploited	12.4.3-03526, 12.5.0-02952	02.09.2026	SB2026090221
#VU146660 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-83549	CWE-78	High	Public exploit available	Exploited	12.4.3-03526, 12.5.0-02952	02.09.2026	SB2026090221