Live › vulnerability › CVE-2019-7481
Go to dashboardSonicWall SMA100 SSL VPN appliances contain an SQL injection flaw that lets an unauthenticated remote user read data they should not see. CISA lists it as actively exploited, and the KEV tag notes ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SonicWall SMA100 | vendor | – | – |
Check the SMA100 firmware version under the appliance's System > Status page against the vendor advisory: unknown from sources.
Apply the SonicWall SMA100 firmware update per vendor instructions; the specific fixed version is unknown from sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SonicWall SMA100 contains a SQL injection vulnerability allowing an unauthenticated user to gain read-only access to unauthorized resources.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2019-7481")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.