Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild
Article Content
- •SonicWall's SMA1000 vulnerabilities (CVE-2026-15409, CVE-2026-15410) are actively exploited.
- •Fortinet's CVEs (CVE-2026-39808, CVE-2026-25089) were added to CISA's KEV catalog after exploitation.
- •Organizations are advised to prioritize vulnerabilities based on real-world risk and exposure.
The inaugural July 2026 InfraTrust Pulse report reveals critical vulnerabilities affecting infrastructure devices, particularly SonicWall's SMA1000 and Fortinet's FortiSandbox. SonicWall's CVE-2026-15409 and CVE-2026-15410 are being actively exploited, allowing attackers to execute remote code and exfiltrate sensitive data. The vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog on July 14, 2026, with a federal remediation deadline of July 17. Additionally, two Fortinet vulnerabilities (CVE-2026-39808 and CVE-2026-25089) were added to the KEV catalog on July 16, 2026, after being exploited in the wild. Organizations using these devices are urged to patch immediately and conduct forensic reviews to assess potential compromises. The report emphasizes prioritizing vulnerabilities based on exploitability and exposure rather than severity scores alone.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Salt Typhoon and CVE-2026-15409 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA's CI Fortify Initiative Enhances Resilience for Critical Infrastructure The CI Fortify initiative, launched by CISA and international partners, aims to ensure critical infrastructure can maintain essential services during cyber attacks. This initiative comes in response to recent attacks on U.S. water systems attributed to Iranian hackers, which highlighted vulnerabilities in operational… 
AT&T Data Breach Exposes Call Logs of 109 Million Customers In April 2024, AT&T experienced a significant data breach that compromised the call logs of 109 million customers. The breach revealed sensitive information such as phone numbers, call durations, and location data from records dating back to May 2022. Although AT&T stated that the logs did not include call content or…