CRITICALVulnerability
Global

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

·Source: Dark Reading

Updated:

Executive Summary

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.

Analysis

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Source Attribution

Originally published by Dark Reading on Oct 12, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9869 — A stack-based buffer overflow vulnerability exists in the boa formTR069Config fu...

A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9869
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9827 — A arbitrary file write vulnerability exists in the boa formUploadFile functional...

A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9827
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-9817 — A stack-based buffer overflow vulnerability exists in the boa formUploadFile fun...

A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.

CVE-2026-9817
NIST NVD