Skip to content
Critical Vulnerability in SonicWall SMA1000 Exploited by Hackers

Critical Vulnerability in SonicWall SMA1000 Exploited by Hackers

First seen 18 Dec 2025, 09:54 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A critical privilege escalation vulnerability, CVE-2025-40602, has been discovered in SonicWall's SMA1000 appliance, allowing attackers to gain unauthorized administrative access. The flaw affects the appliance management console and poses a significant risk to enterprise networks using SonicWall's remote access solutions. SonicWall PSIRT disclosed the vulnerability on December 17, 2025.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (3)

Following this threat?

Track Sonicwall and CVE-2025-40602 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed