Appliance — PoC Archivehttps://poc.intelseclab.com/tags/appliance/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000SonicWall SMA 8200v Cross-Parameter Blind SQL Injection to Root (CVE-2026-4112)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4112-sonicwall-sma-sqli-hash-extraction/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-4112-sonicwall-sma-sqli-hash-extraction/High severity (CVSS 7.2) — network · CVE-2026-4112 (SonicWall Advisory SNWLID-2026-0003). Status: Weaponized. Affects: SonicWall SMA 8200v management console (Jetty + Struts 2, port 8443). Tags: sonicwall, sma, sql-injection, blind-sqli, privilege-escalation, load-file, hash-extraction, appliance.networkHighsonicwallsmasql-injectionblind-sqliprivilege-escalationload-filehash-extractionapplianceFortinet FortiSandbox "Start VNC" OS Command Injection (CVE-2026-25089)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25089-fortisandbox-cmd-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-25089-fortisandbox-cmd-injection/Critical severity (CVSS 9.8) — network · CVE-2026-25089. Status: PoC. Affects: Fortinet FortiSandbox (Web UI "start VNC" feature). Tags: fortisandbox, fortinet, command-injection, cwe-78, unauthenticated, rce, appliance, network.networkCriticalfortisandboxfortinetcommand-injectioncwe-78unauthenticatedrceappliancenetwork