Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: SonicWall
Product: SMA1000 Appliances
EPSS: 0.080 (94.8th percentile, 2026-10-30)
SonicWall SMA1000 Appliances are affected by a server-side request forgery vulnerability that lets a remote unauthenticated attacker gain unauthorized access to sensitive functionality and perform unauthorized operations. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-09-02.
Reviewed by PerimeterClock.
| Date | Event | Source |
|---|---|---|
| 2026-09-02 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
| 2026-09-03 | First public PoC repo seen | GitHub |
Affected and fixed versions: see the vendor advisory or NVD entry below.