SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 02/09/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| sma8200v | ≥ 12.5.0, < 12.5.0-02952< 12.4.3-03526 | 12.5.0-0295212.4.3-03526 |
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free