VulnerabilityBleeping Computer
10.0 — CRITICAL
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw, allowing them to deploy custom malware and gain unauthorized access to vulnerable VPN appliances.
⚙️Technical Details
CVEs
CVE-2026-15409CVE-2026-15410
Affected Systems
Sonicwall Sma6210Sonicwall Sma7210Sonicwall Sma8200V
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Large corporations, government agencies, and Managed Service Providers (MSSPs) using SonicWall SMA1000 appliances
🛡️Recommended Actions
1Apply the hotfix release as soon as possible to remediate the vulnerabilities
2Monitor for suspicious activity on VPN appliances
3Conduct regular vulnerability scans and patch systems promptly
📦Affected Products
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200VSonicwall Sma6200Sonicwall Sma6200 FirmwareSonicwall Sma7200Sonicwall Sma7200 Firmware
🔐NVD Verified DataVERIFIED
CVE-2026-15409 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-918
Affected Products (CPE)
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200V
CVE-2026-15410 ↗CVSS 7.2 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-94
Affected Products (CPE)
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200V
CVE-2025-40602 ↗CVSS 6.6 — MEDIUM
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-862CWE-250
Affected Products (CPE)
Sonicwall Sma6200Sonicwall Sma6200 FirmwareSonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7200
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.