CVE-2026-15409

No fix known ExploitedEPSS 7%CVSS 10.0

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.

Published 2026-07-14 · In CISA KEV since 2026-07-14 · CVE record · OSV

Products: SonicWall SMA1000