Exploited Vulnerabilities DailyCVE-2025-40602: SonicWall SMA1000 appliance
EPSS2.7%No. 1533 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV19
Same product1
| Field | Value |
|---|---|
| Vendor | SonicWall |
| Product | SMA1000 appliance |
| Name | SonicWall SMA1000 Missing Authorization Vulnerability |
| Added to KEV | 2025-12-17 |
| US federal due date | 2025-12-24 |
| Ransomware use | Unknown |
| CWE | CWE-862, CWE-250 |
CISA description
SonicWall SMA1000 contains a missing authorization vulnerability that could allow for privilege escalation appliance management console (AMC) of affected devices.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A SonicWall SMA1000 appliance vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-12-17.