Known vulnerabilities in SonicWall SMA 1000 12.5.0-02624

Vendor: SonicWall
Software: SonicWall SMA 1000
Version: 12.5.0-02624
Software CPE: cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SonicWall SMA 1000 version 12.5.0-02624 SonicWall SMA 1000 12.5.0-02624 is affected by 2 vulnerabilities: 1 critical, 1 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137578 - Server-Side Request Forgery (SSRF)
CVE-2026-15409		 CWE-918 Critical
Public exploit available
Exploited
 12.4.3-03453, 12.5.0-02835 15.07.2026 SB2026071507
#VU137579 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-15410		 CWE-94 High
No
Exploited
 12.4.3-03453, 12.5.0-02835 15.07.2026 SB2026071507