CVE-2026-15409
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance...
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
- Record
CVE-2026-15409- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2026-44404
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
- Record
EUVD-2026-44404- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-35rc-2vcv-r6q5
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance...
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
- Record
GHSA-35rc-2vcv-r6q5- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
CISA KEV No score
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.
- Record
CVE-2026-15409- Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
- Record
CVE-2026-15409- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-918
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | SonicWall SMA1000 WorkPlace wsproxy SSRF Remote Command Execution | 2026-07-14 |
| PoC in GitHub | 0xBlackash/CVE-2026-15409 | 2026-07-15 |
| PoC in GitHub | HORKimhab/CVE-2026-15409 | 2026-07-15 |
| PoC in GitHub | remmons-r7/rapid7-CVE-2026-15409 | 2026-07-15 |
| PoC in GitHub | MrRawBit/SonicWall-SMA1000-Zero-Day-IoC-Check | 2026-07-16 |
| PoC in GitHub | tc4dy/CVE-2026-15409-15410-Framework | 2026-07-17 |
| PoC in GitHub | Ch4120N/CVE-2026-15409 | 2026-08-03 |
| Nuclei | SonicWall SMA1000 - Server-Side Request Forgery |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-15409 is a critical vulnerability (CVSS 10.0) in Sonicwall Sma1000, published July 14, 2026. CISA lists it as known to be exploited, since July 14, 2026. EUVD reports exploitation since July 14, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.79%, the 94th percentile. No source names a fixed version.