Login Request a demo
SM
Product
SMA1000
by SonicWall · last CVE Oct 7, 2026
On CISA KEVExploited in the wildRansomware-linked
14
CVEs
6
On KEV
10.0
Max CVSS
4
New 30D
Vulnerabilities14In the news12Timeline
Severity mix
Critical 4High 7Medium 3Low 0
Severity
All severities14Critical4High7Medium3Low0
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add SMA1000 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-40602
In wildKEV
6.6
3%
Dec 18
SonicWall SMA1000 Missing Authorization Vulnerability
Affected: 12.4.3-03093 (platform-hotfix) and earlier versions; 12.5.0-02002 (platform-hotfix) and earlier versions
CVE-2026-4114
6.6
1%
Apr 9
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication
Affected: 12.4.3-03245 (platform-hotfix) and earlier versions.; 12.5.0-02283 (platform-hotfix) and earlier versions.
CVE-2026-102258
6.1
0%
Oct 7
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could…
Affected: 12.4.3-03526 (platform-hotfix) and older versions; 12.5.0-02952 (platform-hotfix) and older versions
Showing 3