tldrdailynews.com logo

SonicWall SMA1000 Zero-Days Exploited; Critical Patch Released

1 min read
Source: BleepingComputer
SonicWall SMA1000 Zero-Days Exploited; Critical Patch Released
Photo: BleepingComputer
TL;DR

SonicWall warns that two SMA1000 flaws (CVE-2026-15409 SSRF and CVE-2026-15410 code execution) are being actively exploited in zero-day attacks; a patch is now available for affected SMA1000 models (6210, 7210, 8200v) via hotfix releases, with IOCs provided to detect compromise; if compromised, reimage or redeploy, reset passwords and rotate TOTP tokens; there are no mitigations outside applying the hotfix; CISA added the flaws to KEV and federal agencies must patch by July 17, 2026 under BOD 26-04.

Topics:technologysecurity#patch#security#sma1000#sonicwall#vulnerabilities#zero-day
Share this article
  1. SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now  BleepingComputer
  2. Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands  The Hacker News
  3. SonicWall SMA1000 Series Products Multiple Vulnerabilities  Hong Kong Computer Emergency Response Team Coordination Centre
  4. SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits  SecurityWeek
  5. SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)  Help Net Security

Want the full story? Read the original reporting

Read on BleepingComputer