Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-40602

No fix known ExploitedEPSS 3%CVSS 6.6

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

Published 2025-12-18 · In CISA KEV since 2025-12-17 · CVE record · OSV

Products: SonicWall SMA1000