HIGHVulnerability
Verified
Global

CISA KEV: SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.

Analysis

SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location. Added to CISA Known Exploited Vulnerabilities catalog on 2026-07-14. Remediation due: 2026-07-17.

Indicators of Compromise (1)

CVE (1)
CVE-2026-15409
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jul 14, 2026. Verified by: CISA.

Related Threats

CRITICALVulnerability

Fresh SharePoint Vulnerability Exploited Soon After Disclosure

The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek .

SecurityWeek
CRITICALVulnerability

CISA urges immediate action on actively exploited Fortinet flaws

CISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...]

BleepingComputer
LOWVulnerability

Senior executives are killing your shadow AI strategy

Shadow IT has long been a major problem for CISOs, but the biggest problem may be coming from the executive suite’s hunger for unsanctioned AI. Nearly two-thirds of senior decision-makers admit to using unapproved AI tools , compared to just 31% of lower-level employees, according to a survey by Microsoft solutions partner TrustedTech. The use of shadow AI is prevalent among senior executives even

CSO Online