CVE-2026-15409: sma6210 firmware 12.4.3-03245, 12.4.3-03387, 12.4.3-03434 (+3 more affected versions); +3 more affected products

Affected technology

sma6210 firmware · 12.4.3-03245
sonicwall

sma6210 firmware · 12.4.3-03387
sonicwall

sma6210 firmware · 12.4.3-03434
sonicwall

sma6210 firmware · 12.5.0-02283
sonicwall

sma6210 firmware · 12.5.0-02624
sonicwall

sma6210 firmware · 12.5.0-02800
sonicwall

sma7210 firmware · 12.4.3-03245
sonicwall

sma7210 firmware · 12.4.3-03387
sonicwall

sma7210 firmware · 12.4.3-03434
sonicwall

sma7210 firmware · 12.5.0-02283
sonicwall

sma7210 firmware · 12.5.0-02624
sonicwall

sma7210 firmware · 12.5.0-02800
sonicwall

sma8200v · 12.4.3-03245
sonicwall

sma8200v · 12.4.3-03387
sonicwall

sma8200v · 12.4.3-03434
sonicwall

sma8200v · 12.5.0-02283
sonicwall

sma8200v · 12.5.0-02624
sonicwall

sma8200v · 12.5.0-02800
sonicwall

SMA1000 · 12.4.3-03245 through 12.4.3-03434, 12.5.0-02283 through 12.5.0-02800
SonicWall

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location. Source advisory’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high.