THREAT OPS › CVEs › CVE-2026-15410
CVE-2026-15410 — SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Vulnerability details
- Affected productsSMA1000 Appliances
- KEV remediation due2026-07-17
Related reporting
- July 2026 CVE Landscaperecordedfuture
- [CISA KEV] CVE-2026-15410 — SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Code Injection Vulnerabilitycisa_kev
- 20th July – Threat Intelligence Reportcheckpoint_research
- Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitationvolexity
- CVE-2026-15409 / CVE-2026-15410 | SonicWall SMA1000 Server-Side Request Forgery and Code Injection Vulnerabilitieshorizon3
- CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wildtenable
- Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)rapid7