CVE Tools
Track your stack

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

SecurityWeekBy Eduard Kovacs

Reported exploitedSMA1000 secure remote access appliances

Our summary

SonicWall has issued an urgent warning that two zero-day vulnerabilities are being actively exploited against its SMA1000 secure remote access appliances. The flaws, CVE-2026-15409 and CVE-2026-15410, affect specific versions and could allow attackers to perform SSRF attacks or execute arbitrary commands. Customers are advised to apply the latest hotfixes immediately to mitigate risk.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. Dark ReadingSonicWall SMA 1000 Zero-Days Enable Unauthenticated RCECVE-2026-15409, CVE-2026-15410
  2. The Hacker NewsAttackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainCVE-2026-15409, CVE-2026-15410
  3. Help Net SecuritySonicWall SMA 1000 appliances under attack via zero-day flawsCVE-2026-15409, CVE-2026-15410
  4. BleepingComputerSonicWall warns of actively exploited SMA1000 zero-day flawsCVE-2026-15409, CVE-2026-15410
  5. BleepingComputerCISA: SonicWall SMA1000 flaws now exploited by ransomware gangsCVE-2026-15409, CVE-2026-15410
  6. The Hacker NewsINC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 FlawsCVE-2026-15409, CVE-2026-15410
  7. SecurityWeekRecent SonicWall Vulnerabilities Exploited in Ransomware AttacksCVE-2026-15409, CVE-2026-15410
  8. Help Net SecurityWeek in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedCVE-2026-15409, CVE-2026-15410
  9. BleepingComputerNew InfraTrust report reveals infrastructure flaws admins should patch firstCVE-2026-15409, CVE-2026-15410
  10. Help Net SecuritySonicWall SMA zero-days were exploited weeks before disclosureCVE-2026-15409, CVE-2026-15410

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store