SonicWall Patches Exploited SMA 1000 Zero

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in SonicWall SMA1000 Exploited by Hackers A critical privilege escalation vulnerability, CVE-2025-40602, has been discovered in SonicWall's SMA1000 appliance, allowing attackers to gain unauthorized administrative access. The flaw affects the appliance management console and poses a significant risk to enterprise networks using SonicWall's remote access solutions. SonicWall PSIRT disclosed the vulnerability on December 17, 2025. 3 sources 24