EUVD-2026-69704
GHSA-ghw2-cfh2-xvgc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Pre-auth network SSRF on an edge appliance justifies AV:N/AC:L/PR:N/UI:N and S:C reaching internal systems; C:H and I:H fit unauthorized access/operations, but availability impact is unclear so A:L rather than A:H.
Primary rating from Vendor (sonicwall).
CVSS VectorVendor: sonicwall
Lifecycle Timeline
7DescriptionCVE.org
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
Articles & Coverage 2
AnalysisAI
Pre-authentication server-side request forgery in the SonicWall SMA1000 secure-access appliance's Work Place interface lets a remote unauthenticated attacker abuse an unintended alternate access path to reach internal/sensitive functionality and perform unauthorized operations. It affects SMA1000 firmware up to and including 12.4.3-03453 and 12.5.0-02835 (platform-hotfix builds and older), carries a maximal CVSS of 10.0, and has publicly available exploit code. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions beyond network reachability - remote unauthenticated exploitation against the SMA1000 Work Place interface, which is typically internet-exposed by design. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine top-tier priority, not an inflated-score paper risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the SonicWall PSIRT fix per advisory SNWLID-2026-0016 (https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016) - upgrade to a platform-hotfix build newer than 12.4.3-03453 on the 12.4.x branch and newer than 12.5.0-02835 on the 12.5.x branch (confirm the exact fixed hotfix build directly with SonicWall, as the provided data lists only the last-vulnerable versions). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all SonicWall SMA1000 appliances and immediately identify those running firmware versions 12.4.3-03453, 12.5.0-02835, or earlier. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Server-side request forgery in the SonicWall SMA1000 Appliance Work Place interface lets remote, unauthenticated attacke
OS command injection in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote authenticated administr
Post-authentication OS command execution in the SonicWall SMA1000 Appliance Management Console (AMC) allows a remote att
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today