VulnerabilityBleeping Computer
10.0 — CRITICAL
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now
SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released security updates. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
SonicWall SMA1000 appliances are being actively exploited in zero-day attacks due to two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, which allow remote attackers to execute arbitrary commands and make unintended requests.
⚙️Technical Details
Affected Systems
SMA1000 Appliance Work Place interfaceSMA1000 Appliance Management Console
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Federal agencies and organizations using SonicWall SMA1000 appliances
🛡️Recommended Actions
1Upgrade to the latest hotfix release immediately
2Perform an analysis of extraweb_access.log and ctrl-service.log for indicators of compromise
3Re-image physical appliances or redeploy virtual appliances, change user and administrator passwords, and reset TOTP tokens if compromised
📦Affected Products
SMA1000 Appliance Work Place interfaceSMA1000 Appliance Management Console
🔐NVD Verified DataVERIFIED
CVE-2026-15409 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-918
CVE-2026-15410 ↗CVSS 7.2 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-94
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.