CVE-2019-7486

8.8 highEPSS 1.6%

High (8.8) in sonicwall sma 100 firmware. EPSS 1.6% chance of exploitation in the next 30 days.

Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2019-12-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sonicwall:sma_100_firmware

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0021

Check your stack JSON