Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution.

Multiple vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, the most severe of which could allow for remote code execution. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the most severe vulnerability could allow an unauthenticated, remote attacker to reach internal functionality and perform unauthorized operations on an affected appliance.

There are currently no reports of these vulnerabilities being exploited in the wild.

Multiple vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, the most severe of which could allow for remote code execution. Details of these vulnerabilities are as follows:

Tactic:Initial Access(TA0001):

Technique:Exploit Public-Facing Application(T1190):

Lower Severity Vulnerabilities Include:

Successful exploitation of the most severe of these vulnerabilities could allow an unauthenticated attacker to reach internal appliance functionality; if chained with the post-authentication command injection vulnerability, this could result in remote code execution and full system compromise.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®