SonicWall SMA1000 Appliances Code Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 14/07/2026. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.
| Package | Affected versions | Patched versions |
|---|---|---|
| sma8200v | = 12.4.3-03245= 12.4.3-03387= 12.4.3-03434= 12.5.0-02283= 12.5.0-02624= 12.5.0-02800 |
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free