SonicWall Sma1000 — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
December 18, 2025
Last Seen
July 15, 2026

SonicWall Sma1000 is a technology platform tracked across 3 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed December 18, 2025; most recent activity July 15, 2026.

Related Threat Clusters

  • Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

    SonicWall has reported two critical vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 Series appliances, which are currently being actively exploited. The first vulnerability, CVE-2026-15409, is…

    41 articles · Updated July 15, 2026
  • Cisco ASA Zero-Day Exploited in State-Espionage Campaign

    Cisco disclosed a state-espionage campaign targeting its Adaptive Security Appliances (ASA), which are used for firewall and VPN functions. Attackers exploited two zero-day vulnerabilities to infiltrate government…

    27 articles · Updated December 18, 2025
  • Critical Vulnerability in SonicWall SMA1000 Exploited by Hackers

    A critical privilege escalation vulnerability, CVE-2025-40602, has been discovered in SonicWall's SMA1000 appliance, allowing attackers to gain unauthorized administrative access. The flaw affects the appliance…

    3 articles · Updated December 18, 2025

Recent Intelligence Reports

  • CC-4813 — Digital.Nhs.Uk · July 15, 2026
  • CISA Adds SonicWall SMA1000 Vulnerabilities to KEV Catalog Following Active Exploitation — Thecyberexpress · July 15, 2026
  • Hackers Actively Exploit SonicWall SMA1000 Zero-Day to Escalate Privileges — Cyberpress · December 18, 2025
  • CVE-2025-40602: SonicWall SMA1000 Vulnerability Actively Exploited — Socradar · December 18, 2025
  • Hackers Exploiting SonicWall SMA1000 0 — Cybersecuritynews · December 18, 2025
  • Hackers Actively Exploit SonicWall SMA1000 Zero — Gbhackers · December 18, 2025

CVSS v3.1 Breakdown