CVE-2026-15409

Published Jul 14, 2026

Last updated 3 months ago

Exploit known CVSS critical 10.0

Netgear

Sonicwall

Cloud

Network

Zero-day

VPN

Server

Port (443)

Firmware

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-15409 is a critical server-side request forgery (SSRF) vulnerability impacting SonicWall SMA 1000 Series appliances. This flaw resides within the SMA1000 Appliance WorkPlace interface. Exploitation of CVE-2026-15409 can allow remote, unauthenticated attackers to compel the appliance to initiate requests to unintended network locations. This vulnerability has been observed in active exploitation, frequently in conjunction with CVE-2026-15410. SonicWall has released firmware patches to address this issue and advises customers to upgrade their appliances and investigate for potential compromise.

Description: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Source: PSIRT@sonicwall.com
NVD status: Analyzed
Products: sma6210_firmware, sma7210_firmware, sma8200v

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Exploit added on: Jul 14, 2026
Exploit action due: Jul 17, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

PSIRT@sonicwall.com: CWE-918

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03245:*:*:*:*:*:*:*",
            "matchCriteriaId": "7F861049-5B88-4E18-A0E7-D1E2BC7A4342",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03387:*:*:*:*:*:*:*",
            "matchCriteriaId": "E4A6CA48-E2D9-4F18-8FC8-B1EE7F51789C",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.4.3-03434:*:*:*:*:*:*:*",
            "matchCriteriaId": "EBCE7761-8416-4942-B0BD-426EFC73B57C",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02283:*:*:*:*:*:*:*",
            "matchCriteriaId": "CE23BD37-4112-407F-9E34-04CB5A4DA996",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02624:*:*:*:*:*:*:*",
            "matchCriteriaId": "95E3313E-0647-40ED-9848-5AC01188A84F",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma6210_firmware:12.5.0-02800:*:*:*:*:*:*:*",
            "matchCriteriaId": "75F6B9CE-73E4-42BE-9CE1-FD79255CDD0B",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "7B24D300-1154-49A1-A1F3-FB0CC717166A",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03245:*:*:*:*:*:*:*",
            "matchCriteriaId": "55CD7766-9F2D-450D-A878-AA1522E8FF68",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03387:*:*:*:*:*:*:*",
            "matchCriteriaId": "EAF12D10-FA8F-471E-B008-68E0E29089C6",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.4.3-03434:*:*:*:*:*:*:*",
            "matchCriteriaId": "79920402-165D-4D81-BFD2-9F679A48671A",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02283:*:*:*:*:*:*:*",
            "matchCriteriaId": "6842E4D7-BEDA-41FB-AEC3-CEB3692374C2",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02624:*:*:*:*:*:*:*",
            "matchCriteriaId": "6AF4557F-ABAF-4795-915A-695383F64EEB",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:sonicwall:sma7210_firmware:12.5.0-02800:*:*:*:*:*:*:*",
            "matchCriteriaId": "9459507A-A2C8-400D-8669-E8ADBDE61DE0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "E9B414C5-C376-4216-A267-ABC0930905CE",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03245:*:*:*:*:*:*:*",
            "matchCriteriaId": "571C9CA1-F660-4479-9E91-B3B1714A2090",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03387:*:*:*:*:*:*:*",
            "matchCriteriaId": "58706C99-B77F-4AE5-BD45-EBA65DEE2485",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.4.3-03434:*:*:*:*:*:*:*",
            "matchCriteriaId": "9E698DFA-1684-43E3-9964-0E207A7A2CC1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02283:*:*:*:*:*:*:*",
            "matchCriteriaId": "F2F44543-2404-4CDF-9D2F-1B851660F5D5",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02624:*:*:*:*:*:*:*",
            "matchCriteriaId": "1E14F40F-4AA1-42B4-998E-AC965FBBE519",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:12.5.0-02800:*:*:*:*:*:*:*",
            "matchCriteriaId": "43197E99-0500-4971-8A66-4E70F8138289",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      },
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "653B5F4D-7417-4A85-B385-46157A1540A6",
            "vulnerable": false
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.