SonicWall Patches SMA1000 Vulnerabilities Exploited in Zero-Day Attacks

SonicWall has disclosed the discovery of two vulnerabilities in its SMA1000 series appliances that attackers exploited in zero-day attacks even before fixes were released.

The vulnerabilities have been assigned the identifiers CVE-2026-15409 and CVE-2026-15410. According to the company, both flaws have already been exploited in real-world attacks.

SonicWall has released security updates that address these vulnerabilities and strongly recommends that customers using SMA1000 appliances install the patches as soon as possible.

SMA1000 is a line of SonicWall remote access gateways used by organizations to provide employees with secure connections to corporate networks. Vulnerabilities in such devices pose a heightened risk, since they are typically exposed to the internet and serve as an entry point into a company's internal infrastructure.

The company has not disclosed technical details about the exploited vulnerabilities or the nature of the attacks, so as not to make things easier for other attackers before users have widely updated their devices.

Source: Bleeping Computer