CVE-2025-40602
SonicWall SMA1000 appliance
SonicWall SMA1000 Missing Authorization Vulnerability
What it is
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other SonicWall entries on the list
- SonicOS SSLVPN SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability CVE-2026-19868 · Nov 6, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability CVE-2026-83549 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-83548 · Sep 2, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability CVE-2026-15410 · Jul 14, 2026
- SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability CVE-2026-15409 · Jul 14, 2026
- SMA100 Appliances SonicWall SMA100 Appliances OS Command Injection Vulnerability CVE-2023-44221 · May 1, 2025