Known vulnerabilities in SonicWall SMA 1000 12.5.0-02952

Vendor: SonicWall
Software: SonicWall SMA 1000
Version: 12.5.0-02952
Software CPE: cpe:2.3:h:sonicwall:sma_1000:*:*:*:*:*:*:*:*
Website: https://www.sonicwall.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SonicWall SMA 1000 version 12.5.0-02952 SonicWall SMA 1000 12.5.0-02952 is affected by 4 vulnerabilities: 1 high, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153400 - Server-Side Request Forgery (SSRF)
CVE-2026-102255		 CWE-918 High
No
No
 12.4.3-03670, 12.5.0-03082 06.10.2026 SB2026100662
#VU153401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-102256		 CWE-78 Low
No
No
 12.4.3-03670, 12.5.0-03082 06.10.2026 SB2026100662
#VU153402 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-102257		 CWE-22 Low
No
No
 12.4.3-03670, 12.5.0-03082 06.10.2026 SB2026100662
#VU153403 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-102258		 CWE-79 Low
No
No
 12.4.3-03670, 12.5.0-03082 06.10.2026 SB2026100662