CVE-2025-40602 SonicWall SMA1000 Appliance
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.
- CVSS
- not scored
On CISA’s exploited list
SonicWall SMA1000 Missing Authorization Vulnerability
- Added
- 2025-12-17
- Federal patch deadline
- 2025-12-24
- Ransomware use
- not known