Known vulnerabilities in SonicWall SMA 1000 12.5.0-02800

Known vulnerabilities in SonicWall SMA 1000 12.5.0-02800

Vendor: SonicWall

Software: SonicWall SMA 1000

Version: 12.5.0-02800

Software CPE: cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*

Website: https://www.sonicwall.com/

Total vulnerabilities: 8

Public exploits: 3

Known exploited (KEV): 4

Vulnerabilities by Severity

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU153400 - Server-Side Request Forgery (SSRF) CVE-2026-102255	CWE-918	High	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-102256	CWE-78	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153402 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-102257	CWE-22	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU153403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-102258	CWE-79	Low	No	No	12.4.3-03670, 12.5.0-03082	06.10.2026	SB2026100662
#VU146659 - Server-Side Request Forgery (SSRF) CVE-2026-83548	CWE-918	Critical	Public exploit available	Exploited	12.4.3-03526, 12.5.0-02952	02.09.2026	SB2026090221
#VU146660 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-83549	CWE-78	High	Public exploit available	Exploited	12.4.3-03526, 12.5.0-02952	02.09.2026	SB2026090221
#VU137578 - Server-Side Request Forgery (SSRF) CVE-2026-15409	CWE-918	Critical	Public exploit available	Exploited	12.4.3-03453, 12.5.0-02835	15.07.2026	SB2026071507
#VU137579 - Improper Control of Generation of Code ('Code Injection') CVE-2026-15410	CWE-94	High	No	Exploited	12.4.3-03453, 12.5.0-02835	15.07.2026	SB2026071507