Product
Appliance Management Console
- First Reported
- Sep 2, 2026
- Latest Reported
- Oct 7, 2026
Reported Context (4)
- The other three flaws can be used only after logging in. Two of them are in the Appliance Management Console (AMC), where administrators configure the appliance. SonicWall Releases Hotfixes for Critical Pre-Authentication SSRF Flaw in SMA1000 Appliances
- CVE-2026-102257 and CVE-2026-102258 affect the Appliance Management Console and require admin access. SonicWall Patches Four Vulnerabilities in SMA 1000 Appliances
- CVE-2026-102257 is a Zip Slip path traversal vulnerability in the Appliance Management Console that allows a specially crafted archive to place files outside the intended extraction directory and may lead to remote code SonicWall fixes critical unauthenticated SSRF flaw in SMA1000 appliances
- CVE-2026-83549 is a high-severity OS command injection vulnerability in the Appliance Management Console (AMC). On its own, exploitation requires an authenticated administrator and specific system conditions. Although, SonicWall SMA1000 Flaws Exploited in the Wild Enable Unauthenticated RCE
CVE (8)
People (2)
Vendors (1)
Products (8)
Industries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.