Description
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Published: 2026-07-14
Score: 10 Critical
EPSS: 78.4% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

A Server‑Side Request Forgery vulnerability exists in the SonicWall SMA1000 Appliance Work Place interface. The defect, classified as CWE‑918, lets a remote unauthenticated attacker force the appliance to send HTTP requests to arbitrary URLs.

Affected Systems

All current and legacy installations of the SonicWall SMA1000 appliance are affected. No specific firmware versions are listed in the advisory, so every deployed unit should assume vulnerability until a patch is applied.

Risk and Exploitability

The vulnerability scores a CVSS of 10, indicating critical severity. The EPSS score of 78% indicates a high probability that exploitation attempts are already occurring. It is listed in CISA’s KEV catalog, confirming active exploitation in the wild. Attackers can exploit the flaw remotely without authentication, forcing the appliance to issue outbound HTTP requests to target URLs based on attacker input.

Generated by OpenCVE AI on August 1, 2026 at 09:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest SonicWall firmware update that resolves the SSRF flaw.
  • If a patch is not yet available, disable the Work Place interface until the vendor releases a fix.
  • Configure outbound filtering rules to allow traffic only to known, approved external destinations from the appliance.
  • Monitor device logs for anomalous outbound HTTP requests and investigate any unexpected traffic.

Generated by OpenCVE AI on August 1, 2026 at 09:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 01 Aug 2026 09:45:00 +0000

Type Values Removed Values Added
Title SSRF Vulnerability in SonicWall SMA1000 Work Place Interface Enabling Unauthenticated Remote Requests

Sun, 26 Jul 2026 11:00:00 +0000

Type Values Removed Values Added
Title SSRF Vulnerability in SonicWall SMA1000 Work Place Interface Enabling Unauthenticated Remote Requests

Wed, 22 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Title Unauthenticated SSRF in SonicWall SMA1000 Work Place Interface

Mon, 20 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
Title Unauthenticated SSRF in SonicWall SMA1000 Work Place Interface

Wed, 15 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Sonicwall
Sonicwall sma1000
Vendors & Products Sonicwall
Sonicwall sma1000

Tue, 14 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jul 2026 20:00:00 +0000

Type Values Removed Values Added
Description A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Weaknesses CWE-918
References
Metrics kev

{'dateAdded': '2026-07-14T00:00:00+00:00', 'dueDate': '2026-07-17T00:00:00+00:00'}

Subscriptions

Sonicwall Sma1000
cve-icon MITRE

Status: PUBLISHED

Assigner: sonicwall

Published:

Updated: 2026-08-04T03:56:14.089Z

Reserved: 2026-07-10T14:12:14.377Z

Link: CVE-2026-15409

cve-icon Vulnrichment

Updated: 2026-07-14T20:09:22.958Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-01T09:30:03Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)