Known vulnerabilities in SonicWall SMA 1000 12.4.3-03526
Vendor:
SonicWall
Software:
SonicWall SMA 1000
Version:
12.4.3-03526
Software CPE:
cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*
Website:
https://www.sonicwall.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
12.5.0-03082
12.4.3-03670
12.5.0-02952
12.4.3-03526
12.5.0-02835
12.4.3-03453
12.5.0-02800
12.4.3-03434
12.5.0-02624
12.4.3-03387
12.5.0-02283
12.4.3-03245
12.5.0-02002
12.4.3-03093
12.4.3-02963
12.4.3-02907
12.4.3-02925
12.4.3-02854
12.4.3-02676
12.4.2-05352
12.4.2-05082
12.4.2-02044
12.4.1-02994
12.4.1
12.4.0
12.4.1-02873
12.4.1-02779
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU153400 - Server-Side Request Forgery (SSRF) CVE-2026-102255 |
CWE-918 | High | 12.4.3-03670, 12.5.0-03082 | 06.10.2026 |
SB2026100662 |
||
| #VU153401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-102256 |
CWE-78 | Low | 12.4.3-03670, 12.5.0-03082 | 06.10.2026 |
SB2026100662 |
||
| #VU153402 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-102257 |
CWE-22 | Low | 12.4.3-03670, 12.5.0-03082 | 06.10.2026 |
SB2026100662 |
||
| #VU153403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-102258 |
CWE-79 | Low | 12.4.3-03670, 12.5.0-03082 | 06.10.2026 |
SB2026100662 |