VulnerabilityBleeping Computer
10.0 — CRITICAL
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A previously unknown threat actor, tracked as UTA0533, exploited two zero-day vulnerabilities in SonicWall SMA1000 appliances for weeks, allowing them to install custom malware and gain control of the devices.
⚙️Technical Details
CVEs
CVE-2026-15409CVE-2026-15410
Affected Systems
Sonicwall Sma6210Sonicwall Sma7210Sonicwall Sma8200V
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Organizations with SonicWall SMA1000 appliances
🛡️Recommended Actions
1Immediately install the latest patches (12.4.3-03453 and 12.5.0-02835) on all affected SMA1000 appliances.
2Enable network segmentation and isolation to prevent lateral movement in case of a breach.
3Monitor logs and system activity for signs of unusual behavior or malware activity.
📦Affected Products
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200V
🔐NVD Verified DataVERIFIED
CVE-2026-15409 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-918
Affected Products (CPE)
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200V
CVE-2026-15410 ↗CVSS 7.2 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-94
Affected Products (CPE)
Sonicwall Sma6210Sonicwall Sma6210 FirmwareSonicwall Sma7210Sonicwall Sma7210 FirmwareSonicwall Sma8200V
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.