Tag
SonicWall SMA: Multiple Vulnerabilities
3 TTPsMultiple vulnerabilities in SonicWall SMA allow an unauthenticated, remote attacker to bypass security mechanisms and execute arbitrary operating system commands on the affected system, leading to full compromise of the appliance.
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (CVE-2026-15409)
2 TTPs 2 CVEs 6 IOCsA critical server-side request forgery (SSRF) vulnerability, identified as CVE-2026-15409, exists in SonicWall SMA1000 Appliances, allowing a remote, unauthenticated attacker to force the appliance to make requests to arbitrary internal or external locations, potentially leading to information disclosure or access to restricted network services.
Critical OS Command Injection in 9Router (CVE-2026-59800)
1 rule 2 TTPs 1 CVEA critical OS command injection vulnerability (CVE-2026-59800) affects 9Router versions prior to 0.4.44, allowing unauthenticated remote attackers to execute arbitrary OS commands as root via a crafted POST request to the /api/tunnel/tailscale-install endpoint, leading to full system compromise with active exploitation observed.
Multiple Critical Vulnerabilities in Fortinet Products Lead to RCE and Data Exposure
2 rules 4 TTPs 3 CVEs 6 IOCsMultiple critical vulnerabilities (CVE-2025-67862, CVE-2026-25089, CVE-2026-49938) have been discovered across Fortinet products including FortiOS, FortiPortal, FortiProxy, and FortiSandbox, enabling unauthenticated attackers to achieve remote arbitrary code execution and compromise data confidentiality.
Fortinet Appliance Authentication Bypass Vulnerability (CVE-2022-40684) Exploitation
2 rules 2 TTPsExploitation of CVE-2022-40684, a Fortinet appliance authentication bypass vulnerability, allows unauthorized REST API access to modify system configurations, potentially leading to complete system compromise.