SonicWall · SMA1000 Appliances
CVE-2026-15409
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
这是什么
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
CISA: SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.
该怎么做
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
美国联邦机构的修复期限：2026年7月17日
SonicWall 的其他被利用漏洞
| 加入日期 | 漏洞 | 产品 | 严重程度 | 受攻击概率 |
|---|---|---|---|---|
| 2026年9月2日 | Server-Side Request Forgery | SMA1000 Appliances | 严重 10.0 | 8.0% |
| 2026年9月2日 | OS Command Injection | SMA1000 Appliances | 高 7.8 | 9.9% |
| 2026年7月14日 | Code Injection | SMA1000 Appliances | 高 7.2 | 12% |
| 2025年1月24日 | Deserialization | SMA1000 Appliances | 严重 9.8 | 23% |
| 2025年12月17日 | SMA1000 Missing Authorization | SMA1000 appliance | 中 6.6 | 2.8% |
| 2025年5月1日 | OS Command Injection | SMA100 Appliances | 高 7.2 | 76% |
| 2025年4月16日 | OS Command Injection | SMA100 Appliances | 中 6.5 | 4.4% |
| 2025年2月18日 | SSLVPN Improper Authentication | SonicOS | 高 8.2 | 95% |
来源：Known Exploited Vulnerabilities（CISA，公有领域）、CVE records（cve.org）和 EPSS（FIRST）。受攻击概率是 EPSS 对未来 30 天内有人尝试利用该漏洞的估计。