CVE-2025-23006

SonicWall SMA1000 appliances suffered a deserialization vulnerability allowing remote, unauthenticated attackers to execute arbitrary OS commands.

A deserialization of untrusted data flaw in the SonicWall SMA1000 Management Consoles enabled remote code execution without authentication. This is critical for DIB organizations because it represents a severe, avoidable exposure where attackers could pivot into networks, and it highlights the risk of relying on unpatched or poorly secured network hardware. Organizations must ensure all network appliances are patched and monitored for known KEV vulnerabilities.

Shame score — A critical, actively exploited vulnerability in a widely deployed network security appliance that allowed remote code execution without authentication, indicating severe negligence in patch management and security design.