#sonicwall
-
Critical SonicWall SMA 1000 Flaw Exploited Days After Patch
CVE-2026-102255, rated a maximum CVSS 10.0, allows pre-authenticated SSRF attacks. Researchers have already logged 135 exploitation attempts.
-
SonicWall patches max-severity SSRF flaw in SMA1000 gateways
The company has issued emergency hotfixes for its SMA1000 series: the flaw let an unauthenticated attacker make the appliance issue requests on their behalf and reach internal functionality.
-
SonicWall Patches Two 0-Days in SMA 1000: Attackers Chain the Flaws Together
The company released updates for its SMA 1000 series VPN gateways after two vulnerabilities — one of them rated a maximum 10 on the CVSS scale — were actively exploited.
-
SonicWall SMA1000 Vulnerabilities Now Weaponized by Ransomware Operators
CISA has confirmed that ransomware gangs have begun exploiting two recently patched vulnerabilities in SonicWall SMA1000 remote access gateways, including a critical SSRF flaw.
-
INC Ransomware Emerges as the Top Exploiter of SonicWall SMA 1000 Vulnerabilities
According to Resecurity, since early August 2026 the INC Ransomware group has been actively exploiting a chain of vulnerabilities in SonicWall VPN appliances to breach corporate networks.
-
SonicWall SMA Zero-Day Vulnerabilities Used to Gain Root Access Before Disclosure
A previously unknown group exploited vulnerabilities in SonicWall SMA 1000 VPN gateways as zero-days long before they were officially disclosed. The attacks were uncovered by Volexity during an incident investigation.
-
SonicWall Patches SMA1000 Vulnerabilities Exploited in Zero-Day Attacks
SonicWall has warned that attackers were exploiting two vulnerabilities in SMA1000 appliances before patches were released, and has urged customers to update immediately.