Actively exploited SonicWall zero-day patched (CVE-2025-40602)

Back Helpnetsecurity

Actively exploited SonicWall zero-day patched (CVE-2025-40602)

Helpnetsecurity • December 17, 2025

Share: View original

... zero - day vulnerability. CVE-2025-23006 is a deserialization of untrusted data vulnerability in the devices' Appliance Management Console (AMC) and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall Patches Actively Exploited Zero-Day Vulnerability CVE-2025-40602 SonicWall has released a patch for the actively exploited zero-day vulnerability CVE-2025-40602, which affects the Appliance Management Console (AMC) of their devices. This vulnerability allows for deserialization of untrusted data, posing risks to users of SonicWall products. Organizations are advised to apply the patch to mitigate potential threats. 4 sources 94

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (2)

CVE-2025-23006 CVE-2025-40602

Platforms (1)

Appliance Management Console