SonicWall SMA1000 Command Injection in Authenticated Management Path Yields Operating System Command Execution

Last refreshed2026-10-10

Status: UPDATED | Advisory ID: CVE-2026-102256

Key Details

CVE	CVE-2026-102256
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-08
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	SonicWall SMA1000
Classified as	CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
SonicWall	SMA1000

Vendor

Product

Affected Versions

Patch Status

SonicWall

SMA1000

Subsystems	General OT
Sectors	Multiple

What to Know

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

What to Do

Monitor SonicWall's web page for any future patch releases.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-102256
CVE	https://www.cve.org/CVERecord?id=CVE-2026-102256

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-102256

CVE