CVE-2026-15409: listed in the CISA KEV catalog CVE-2026-15409 · KEV 2026-07-14
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Is CVE-2026-15409 exploited? Listed in the CISA KEV catalog on 2026-07-14. Federal remediation due 2026-07-17. Past that date by 29 days. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-15409 Primary sources What this record does not say No CVSS score from NVD. No EPSS score. No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.
CVE-2026-15409: listed in the CISA KEV catalog CVE-2026-15409 · KEV 2026-07-14
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
Is CVE-2026-15409 exploited? Listed in the CISA KEV catalog on 2026-07-14. Federal remediation due 2026-07-17. Past that date by 29 days. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-15409 Primary sources What this record does not say No CVSS score from NVD. No EPSS score. No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.