sonicwall news
3 stories
Ransomware Gangs Exploit SonicWall SMA1000 Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware groups are actively exploiting two recently patched vulnerabilities in SonicWall SMA1000 secure remote access gateways. These flaws, identified as CVE-2026-15409 and CVE-2026-15410, include a maximum-severity server-side request forgery (SSRF) vulnerability.
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
Reports indicate that a sophisticated threat actor, identified as UTA0533, has been actively exploiting two zero-day vulnerabilities within SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. These exploits were reportedly chained together to achieve arbitrary command execution and subsequently gain root access on affected systems. The exploitation occurred prior to the public…
Inc Ransomware Exploits SonicWall SMA Zero-Days
Reports indicate that the Inc ransomware group is currently leveraging two previously undisclosed zero-day vulnerabilities within SonicWall's Secure Mobile Access (SMA) appliances. This active exploitation has been observed to grant attackers root-level control over the compromised devices, which can then be used as a pivot point for broader malicious operations within a targeted network.