CVE Tools
Track your stack

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

BleepingComputerBy Lawrence Abrams

Reported exploitedSMA1000 Appliance

Our summary

SonicWall has issued a warning that two critical vulnerabilities in its SMA1000 Appliance are currently being exploited in real-world attacks. The flaws, identified as CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 (CVSS 7.2), enable remote attackers to perform server-side request forgery and execute arbitrary commands after authentication. These issues affect specific SMA1000 models running outdated firmware versions. SonicWall urges users to apply the latest hotfixes immediately to prevent potential breaches. CISA has also listed these vulnerabilities in its KEV catalog due to their active exploitation.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingSonicWall SMA 1000 Zero-Days Enable Unauthenticated RCECVE-2026-15409, CVE-2026-15410
  2. The Hacker NewsAttackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainCVE-2026-15409, CVE-2026-15410
  3. Help Net SecuritySonicWall SMA 1000 appliances under attack via zero-day flawsCVE-2026-15409, CVE-2026-15410
  4. BleepingComputerSonicWall warns of actively exploited SMA1000 zero-day flawsCVE-2026-15409, CVE-2026-15410
  5. BleepingComputerCISA: SonicWall SMA1000 flaws now exploited by ransomware gangsCVE-2026-15409, CVE-2026-15410
  6. The Hacker NewsINC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 FlawsCVE-2026-15409, CVE-2026-15410
  7. SecurityWeekRecent SonicWall Vulnerabilities Exploited in Ransomware AttacksCVE-2026-15409, CVE-2026-15410
  8. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-15409, CVE-2026-15410
  9. BleepingComputerNew InfraTrust report reveals infrastructure flaws admins should patch firstCVE-2026-15409, CVE-2026-15410
  10. Help Net SecuritySonicWall SMA zero-days were exploited weeks before disclosureCVE-2026-15409, CVE-2026-15410

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store