CVE-2026-15410

KEV High · CVSS 7.2

SonicWall SMA1000 Appliance Management Console (AMC) — Post-authentication Code Injection RCE (OS Command Execution)

CVSS: 7.2; nvd
EPSS: 1.65%; 74th pct
KEV: Listed; 2026-07-14
Class: kernel local; CWE-94

Description

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.

Search profile — drives PoC discovery

Symbols AMCSMA1000SNWLID-2026-0008Appliance Management ConsoleOS command executioncode injectionadministrator authenticated RCE

Keywords CVE-2026-15410SonicWall SMA1000AMC code injectionSMA1000 RCESNWLID-2026-0008SonicWall AMC exploitSMA1000 command injection PoCSonicWall authenticated RCE

Versions: <UNKNOWN>

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

HORKimhab/CVE-2026-15410 needs review

recent activity

gh_search · Python

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-15T18:00:20.000Z · profiled 2026-07-15T18:30:20.000Z