CVE Watch—

CVE-2025-23006

SonicWall SMA1000 Appliances Deserialization Vulnerability

CVSS

—

No CVSS

EPSS

23.4%

p98

KEV

YES

Jan 24, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

22.4%EPSS · 30 days23.4%

2026-06-302026-07-16

KEV catalog record

Product

SonicWall / SMA1000 Appliances

Vulnerability

SonicWall SMA1000 Appliances Deserialization Vulnerability

Added to KEV

Jan 24, 2025

Remediate by

Feb 14, 2025

Known ransomware use

Yes

Summary description

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-154107.2 HIG

71.1%

KEV—71SonicWall SMA1000 Appliances Code Injection Vulnerability18h CVE-2026-1540910.0 CRI

66.4%

KEV—70SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability18h