CVE-2026-15410
HIGH
CVSS: 7.2
EPSS: 11.8%
VulnCheck KEV
Weaponized
CWE-94
T1059
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
Published: 2026-07-14