SF
Product
Sma6200 Firmware
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Sma6200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-23006 RansomwareIn wildKEV | 9.8 | Jan 23 | SonicWall SMA1000 Appliances Deserialization Vulnerability Affected: before 12.4.3-02854 |
| CVE-2025-40602 In wildKEV | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability Affected: before 12.4.3-03245; 12.5.0 before 12.5.0-02283 |
| CVE-2026-4116 | 7.2 | Apr 9 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624 |
| CVE-2026-4113 | 7.2 | Apr 9 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624 |
| CVE-2026-4112 | 7.2 | Apr 9 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only… Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624 |
| CVE-2026-4114 | 6.6 | Apr 9 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624 |
Showing 6