Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild
Article Content
- •SonicWall's SMA1000 vulnerabilities (CVE-2026-15409, CVE-2026-15410) are actively exploited.
- •Fortinet's CVEs (CVE-2026-39808, CVE-2026-25089) were added to CISA's KEV catalog after exploitation.
- •Organizations are advised to prioritize vulnerabilities based on real-world risk and exposure.
The inaugural July 2026 InfraTrust Pulse report reveals critical vulnerabilities affecting infrastructure devices, particularly SonicWall's SMA1000 and Fortinet's FortiSandbox. SonicWall's CVE-2026-15409 and CVE-2026-15410 are being actively exploited, allowing attackers to execute remote code and exfiltrate sensitive data. The vulnerabilities were added to CISA's Known Exploited Vulnerabilities catalog on July 14, 2026, with a federal remediation deadline of July 17. Additionally, two Fortinet vulnerabilities (CVE-2026-39808 and CVE-2026-25089) were added to the KEV catalog on July 16, 2026, after being exploited in the wild. Organizations using these devices are urged to patch immediately and conduct forensic reviews to assess potential compromises. The report emphasizes prioritizing vulnerabilities based on exploitability and exposure rather than severity scores alone.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Salt Typhoon and CVE-2026-15409 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Dutch Intelligence Warns of Chinese Malware Targeting Edge Devices Dutch intelligence agencies have reported a surge in Chinese cyberattacks targeting edge devices such as routers and firewalls. A newly discovered malware can survive firmware updates and has compromised 20,000 network appliances globally. The Military Intelligence and Security Service (MIVD) and the General… 
Bipartisan Bill Introduced After Salt Typhoon Telecom Hacks U.S. Senators Mark R. Warner and Ted Cruz introduced the Telecommunications Cybersecurity and Resilience Act in response to the Salt Typhoon hacks, which compromised the U.S. and global telecommunications sector. This legislation aims to create a voluntary framework for cybersecurity best practices, developed by…