As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0403 Vulnerabilities Fixed in SonicWall SMA1000 Appliance
SonicWall has patched multiple vulnerabilities in the SMA1000 Appliance, including a pre-authentication Server-Side Request Forgery (SSRF) that allows unauthenticated attackers to perform unauthorized internal requests, a post-authentication remote code execution (RCE) flaw via OS command injection, a Zip Slip vulnerability in the management console enabling arbitrary file extraction, and a stored cross-site scripting (XSS) vulnerability in the management console. These flaws affect core security mechanisms and can compromise system integrity and confidentiality.
Why it matters: Organizations running SonicWall SMA1000 appliances must apply patches immediately to prevent unauthenticated remote attackers from exploiting the SSRF and RCE vulnerabilities to gain control of network security infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0403 Vulnerabilities Fixed in SonicWall SMA1000 Appliance
SonicWall has patched multiple vulnerabilities in the SMA1000 Appliance, including a pre-authentication Server-Side Request Forgery (SSRF) that allows unauthenticated attackers to perform unauthorized internal requests, a post-authentication remote code execution (RCE) flaw via OS command injection, a Zip Slip vulnerability in the management console enabling arbitrary file extraction, and a stored cross-site scripting (XSS) vulnerability in the management console. These flaws affect core security mechanisms and can compromise system integrity and confidentiality.
Why it matters: Organizations running SonicWall SMA1000 appliances must apply patches immediately to prevent unauthenticated remote attackers from exploiting the SSRF and RCE vulnerabilities to gain control of network security infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0403 Vulnerabilities Fixed in SonicWall SMA1000 Appliance
SonicWall has patched multiple vulnerabilities in the SMA1000 Appliance, including a pre-authentication Server-Side Request Forgery (SSRF) that allows unauthenticated attackers to perform unauthorized internal requests, a post-authentication remote code execution (RCE) flaw via OS command injection, a Zip Slip vulnerability in the management console enabling arbitrary file extraction, and a stored cross-site scripting (XSS) vulnerability in the management console. These flaws affect core security mechanisms and can compromise system integrity and confidentiality.
Why it matters: Organizations running SonicWall SMA1000 appliances must apply patches immediately to prevent unauthenticated remote attackers from exploiting the SSRF and RCE vulnerabilities to gain control of network security infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0403 Vulnerabilities Fixed in SonicWall SMA1000 Appliance
SonicWall has patched multiple vulnerabilities in the SMA1000 Appliance, including a pre-authentication Server-Side Request Forgery (SSRF) that allows unauthenticated attackers to perform unauthorized internal requests, a post-authentication remote code execution (RCE) flaw via OS command injection, a Zip Slip vulnerability in the management console enabling arbitrary file extraction, and a stored cross-site scripting (XSS) vulnerability in the management console. These flaws affect core security mechanisms and can compromise system integrity and confidentiality.
Why it matters: Organizations running SonicWall SMA1000 appliances must apply patches immediately to prevent unauthenticated remote attackers from exploiting the SSRF and RCE vulnerabilities to gain control of network security infrastructure.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
NCSC-2026-0403 Vulnerabilities Fixed in SonicWall SMA1000 Appliance
SonicWall has patched multiple vulnerabilities in the SMA1000 Appliance, including a pre-authentication Server-Side Request Forgery (SSRF) that allows unauthenticated attackers to perform unauthorized internal requests, a post-authentication remote code execution (RCE) flaw via OS command injection, a Zip Slip vulnerability in the management console enabling arbitrary file extraction, and a stored cross-site scripting (XSS) vulnerability in the management console. These flaws affect core security mechanisms and can compromise system integrity and confidentiality.
Why it matters: Organizations running SonicWall SMA1000 appliances must apply patches immediately to prevent unauthenticated remote attackers from exploiting the SSRF and RCE vulnerabilities to gain control of network security infrastructure.
- Source published
- First seen by Cybersecurity Tracker