SonicWall Patches Exploited SMA 1000 Zero-Day

Back Securityweek

SonicWall Patches Exploited SMA 1000 Zero-Day

Securityweek • December 18, 2025

Share: View original

Threat actors are chaining CVE-2025-40602, a fresh SonicWall zero - day , with CVE-2025-23006 for unauthenticated remote code execution.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SonicWall Patches Actively Exploited Zero-Day Vulnerability CVE-2025-40602 SonicWall has released a patch for the actively exploited zero-day vulnerability CVE-2025-40602, which affects the Appliance Management Console (AMC) of their devices. This vulnerability allows for deserialization of untrusted data, posing risks to users of SonicWall products. Organizations are advised to apply the patch to mitigate potential threats. 4 sources 94

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (2)

CVE-2025-23006 CVE-2025-40602

Platforms (1)

SonicWall SMA 1000