CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
Source Bleeping Computer
Mentioned vulnerabilities
Rated Medium by Threat Radar from the Bleeping Computer text
Data as of 10 Aug 2026, 21:22 UTC
What to do
AI-suggested
SonicWall has released official patches for CVE-2026-15409 and CVE-2026-15410. Customers are strongly urged to apply the hotfix releases immediately to remediate these vulnerabilities. CISA mandates patching within three days for federal agencies. No additional mitigation steps are indicated beyond applying the official patches. Organizations should verify that their SMA1000 appliances are updated to the patched versions to prevent exploitation.
Description
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. [...]