Sonicwall News Articles

Max-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.

2 weeks ago

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Attackers have made 135 attempts to exploit a patched pre-auth SSRF flaw in SonicWall SMA 1000 appliances, originating from two U.S. IPs.

2 weeks ago

Attackers Are Already Exploiting SonicWall’s Freshly Patched Max-Severity SMA1000 Flaw - IT Security News

Just three days after SonicWall shipped a patch for a maximum-severity vulnerability in its SMA1000 secure remote access appliances, attackers have started scanning for and exploiting the flaw in the...

2 weeks ago

Max severity SonicWall SMA1000 flaw now exploited in attacks

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.

2 weeks ago

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances - SwapUpdate

Swati KhandelwalOct 07, 2026Vulnerability / Network Security

2 weeks ago

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall fixed four SMA1000 flaws, including a 10.0-rated SSRF reachable before authentication; it says none are known to be exploited.

2 weeks ago

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances.

2 weeks ago

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) - IT Security News

2026-10-07 13:10 SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote...

2 weeks ago

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) - Help Net Security

CVE-2026-102255 could allow remote unauthenticated attackers to direct a SMA 1000 appliance to issue requests on their behalf.

2 weeks ago

Critical SonicWall SMA 1000 Flaws Enable Unauthenticated RCE

The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.

SonicWall advises customers to patch two new SMA1000 zero-days

Attackers are chaining two SonicWall SMA1000 zero-days to gain remote code execution.

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.

SonicWall SMA zero-days were exploited weeks before disclosure - Help Net Security

CVE-2026-15409 and CVE-2026-15410 were exploited since June 22, 2026, allowing threat actors to install custom malware.

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Ravie LakshmananJul 19, 2026Vulnerability / Network Security

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Volexity links UTA0533 to two SonicWall SMA 1000 zero-days used before disclosure to gain root, plant malware, and capture LDAP credentials.

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs - Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Two new high severity WordPress vulnerabilities, patch

Inc Ransomware Exploits SonicWall SMA Zero-Days

When chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.

Hackers Actively Exploiting SonicWall SMA1000 0-Day Vulnerability in the Wild - IT Security News

SonicWall disclosed two vulnerabilities affecting its SMA1000 Series remote access appliances, and threat actors were already exploiting one of them before the advisory even went public. The flaws include a critical server-side request forgery (SSRF) bug, CVE-2026-15409, scoring a perfect…Read more ...

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released security updates.

Hackers bypass SonicWall VPN MFA due to incomplete patching

Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks.

SonicWall Edge Access Devices Hit by Zero-Day Attacks

In the attacks against the vendor's SMA1000 line, threat actors chained a new zero-day flaw with a critical vulnerability disclosed earlier this year.

U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Cisco, SonicWall, and ASUS vulnerabilities to its Known Exploited Vulnerabilities catalog..

Hackers Actively Exploit SonicWall SMA1000 Zero-Day to Escalate Privileges

The vulnerability, a local privilege escalation flaw, allows attackers with access to the management console to gain elevated privileges and potentially take complete control of affected systems.

Hackers Actively Exploit SonicWall SMA1000 Zero-Day to Escalate Privileges

SonicWall has issued an urgent security advisory warning of active exploitation of a local privilege escalation vulnerability affecting its SMA1000 appliances.

Exploited SonicWall zero-day patched (CVE-2025-40602) - Help Net Security

Attackers have been leveraging CVE-2025-40602, a local privilege escalation vulnerability in SonicWall SMA 1000 appliances.