Back Feeds2.Feedburner

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)

Feeds2.Feedburner •Zeljka Zorz • July 14, 2026

SonicWall has fixed two actively exploited vulnerabilities (CVE-2026-15409, CVE-2026-15410) affecting its Secure Mobile Access (SMA) 1000 Series appliances, and is urging customer organizations to upgrade to a fixed firmare version and for evidence of potential compromise. If the outlined indicators of compromise are present on the system, the company advises re-imaging (hardware) or re-deploying (virtual) appliances, changing user and administrator passwords, and resetting TOTP tokens. The vulnerabilities SonicWall SMA 1000 series appliances are secure … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is a server-side request forgery (SSRF) that allows unauthenticated attackers to send requests to unintended locations, with a CVSS score of 10.0. The second, CVE-2026-15410, is a post-authentication code injection flaw that enables authenticated attackers to execute arbitrary commands, scoring 7.2 on the CVSS scale. Affected models include the SMA1000 Series 6210, 7210, and 8200v running specific firmware versions. SonicWall and CISA have urged immediate patching to mitigate risks. The vulnerabilities were added to the CISA KEV catalog on July 14, 2026, indicating confirmed exploitation in the wild. Organizations are advised to monitor for indicators of compromise and apply the necessary updates as soon as possible. 62 sources 87

Extracted Entities

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)