Sonicwall Sma8200v vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Sonicwall Sma8200v: 10 record(s), with affected versions and fixes.cpe:2.3:a:sonicwall:sma8200v
CVE-2026-83549
High · 7.8
KEV High · 67 Public exploit CWE-78 Sep 1, 2026
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
CVE-2026-83548
Critical · 10.0
KEV Urgent · 82 Public exploit CWE-441 Sep 1, 2026
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
CVE-2026-15410
High · 7.2
KEV Urgent · 71 Public exploit Ransomware CWE-94 Jul 14, 2026
SonicWall SMA1000 Appliances Code Injection Vulnerability
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
CVE-2026-15409
Critical · 10.0
KEV Urgent · 92 Public exploit Ransomware CWE-918 Jul 14, 2026
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
CVE-2026-4116
High · 7.2
CWE-176 Apr 9, 2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114
Medium · 6.6
CWE-176 Apr 9, 2026
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a…
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113
High · 7.2
CWE-204 Apr 9, 2026
An observable response discrepancy vulnerability in the SonicWall SMA1000 series…
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112
High · 7.2
CWE-89 Apr 9, 2026
SQL Injection in Sonicwall Sma6210 Firmware
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
CVE-2025-40602
Medium · 6.6
KEV High · 57 Public exploit CWE-250 Dec 18, 2025
SonicWall SMA1000 Missing Authorization Vulnerability
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
CVE-2025-23006
Critical · 9.8
KEV Urgent · 73 Ransomware CWE-502 Jan 23, 2025
SonicWall SMA1000 Appliances Deserialization Vulnerability
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.