CVE Tools
Track your stack

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

The Hacker NewsBy The Hacker News

Reported exploitedSecure Mobile Access (SMA) 1000 series appliances

Our summary

SonicWall has confirmed that two unpatched vulnerabilities affecting its Secure Mobile Access (SMA) 1000 series appliances are being actively exploited. The flaws, tracked as CVE-2026-15409 and CVE-2026-15410, allow attackers to perform SSRF attacks and execute arbitrary commands with administrative privileges. These issues have already been targeted in real-world attacks, prompting urgent calls for users to update their systems. SonicWall recommends applying version 12.4.3-03453 or later to mitigate risks.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingSonicWall SMA 1000 Zero-Days Enable Unauthenticated RCECVE-2026-15409, CVE-2026-15410
  2. The Hacker NewsAttackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainCVE-2026-15409, CVE-2026-15410
  3. Help Net SecuritySonicWall SMA 1000 appliances under attack via zero-day flawsCVE-2026-15409, CVE-2026-15410
  4. BleepingComputerSonicWall warns of actively exploited SMA1000 zero-day flawsCVE-2026-15409, CVE-2026-15410
  5. BleepingComputerCISA: SonicWall SMA1000 flaws now exploited by ransomware gangsCVE-2026-15409, CVE-2026-15410
  6. The Hacker NewsINC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 FlawsCVE-2026-15409, CVE-2026-15410
  7. SecurityWeekRecent SonicWall Vulnerabilities Exploited in Ransomware AttacksCVE-2026-15409, CVE-2026-15410
  8. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-15409, CVE-2026-15410
  9. BleepingComputerNew InfraTrust report reveals infrastructure flaws admins should patch firstCVE-2026-15409, CVE-2026-15410
  10. Help Net SecuritySonicWall SMA zero-days were exploited weeks before disclosureCVE-2026-15409, CVE-2026-15410

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store