CVE-2026-15409

SonicWall SMA1000 Appliances

Patch now: it is being exploited

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.