Vulnpedia
← All CVEs

CVE-2026-15410

HIGH 7.2 KNOWN EXPLOITED RANSOMWARE ALL-YEARS

Published 2026-07-14 · Last modified 2026-08-04 · sonicwall · NVD: Analyzed

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-07-14, linked to ransomware campaigns. Patch or mitigate now.

Exploitation likelihood

11.8%chance of exploitation in 30 days · 96th percentile

● In CISA KEV (2026-07-14)○ Catalogued PoC◆ SSVC: exploitation active, automatable no

Impact if exploited

7.2CVSS 3.1 · HIGH · ADP

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires an admin / high-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Sonicwall

Products Sma1000 Sma6210 Firmware Sma6210 Sma7210 Firmware Sma7210 Sma8200v

Weakness (CWE)

  • CWE-94: : Improper Control of Generation of Code ('Code Injection')

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References and research data (JSON)

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

1 candidate

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

Known Affected Software Configurations

VendorProductVersion range
SonicwallSma6210 Firmware12.4.3-03245
SonicwallSma6210 Firmware12.4.3-03387
SonicwallSma6210 Firmware12.4.3-03434
SonicwallSma6210 Firmware12.5.0-02283
SonicwallSma6210 Firmware12.5.0-02624
SonicwallSma6210 Firmware12.5.0-02800
SonicwallSma7210 Firmware12.4.3-03245
SonicwallSma7210 Firmware12.4.3-03387
SonicwallSma7210 Firmware12.4.3-03434
SonicwallSma7210 Firmware12.5.0-02283
SonicwallSma7210 Firmware12.5.0-02624
SonicwallSma7210 Firmware12.5.0-02800
SonicwallSma8200v12.4.3-03245
SonicwallSma8200v12.4.3-03387
SonicwallSma8200v12.4.3-03434
SonicwallSma8200v12.5.0-02283
SonicwallSma8200v12.5.0-02624
SonicwallSma8200v12.5.0-02800

All CVSS metrics

  • HIGH 7.2 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • HIGH 7.2 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS