Bleepingcomputer
SonicWall SMA1000 Zero-Day Vulnerability Disclosed
First seen 17 Dec 2025, 21:55 UTC
•


•29.9
Export
Article Content
Browse articles
SonicWall has alerted customers to a local privilege escalation vulnerability (CVE-2025-40602) in the SMA1000 Appliance Management Console, which has been exploited in the wild in conjunction with another vulnerability (CVE-2025-23006). The company advises users to apply patches to mitigate the risk associated with this medium-severity flaw.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
More articles in this cluster
Continue Reading
Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation
Akira Ransomware Group Targets Critical Infrastructure, Extracts $42 Million
Persistent Firestarter Malware Targets Cisco Firepower Devices in US Agencies
Exploitation of Remote Services in Cyber Attacks
CVE-2024-40766 Exploited by Ransomware Groups Targeting SonicWall Firewalls
Ransomware Group Targets SonicWall Gen 7 Firewalls via CVE-2024-40766