Code Injection in SonicWall SMA 1000 - CVE-2026-15410
Published: July 15, 2026
Vulnerability identifier: #VU137579
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-15410
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote user to execute arbitrary OS commands.
The vulnerability exists due to improper control of generation of code in the SMA1000 Appliance Management Console (AMC) when processing crafted input under specific conditions. A remote privileged user can submit crafted input to execute arbitrary OS commands.
The issue is post-authentication and requires administrator access. Active exploitation has been observed in the wild.
Affected software
SonicWall SMA 1000
How to mitigate CVE-2026-15410
Install security update from vendor's website.
SonicWall SMA 1000 - addressed in versions 12.4.3-03453, 12.5.0-02835