SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall has issued an urgent warning about two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, affecting its SMA1000 series appliances. The company reports that threat actors are actively exploiting these flaws in attacks. SonicWall urges all customers to immediately install the newly released patches to mitigate the risk. The vulnerabilities allow remote code execution or unauthorized access, posing a significant threat to enterprise networks. No further technical details have been disclosed to prevent additional exploitation. The advisory follows a pattern of increasing zero-day attacks on network security appliances.

Global Impact

This is a targeted cybersecurity event with direct consequences for enterprises and government agencies relying on SonicWall SMA1000 for remote access. The economic impact is limited to the cost of incident response and potential data breaches for affected organizations.