Patch SonicWall SMA1000 Models for Two Flaws, One Max-Severity
NEOSEC enrichment — no mirror of the original source
SonicWall has published a security advisory urging users to apply hotfixes, investigate for indicators of compromise (IoCs), and clear devices and credentials as needed to remediate two vulnerabilities, both known to be exploited at the tim
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Neely.
Linked advisories
- CVE-2026-15410SonicWall SMA: Mehrere Schwachstellen
- CVE-2026-15409sonicwall sma6210_firmware: Server-Side-Request-Forgery (SSRF)
- CVE-2026-15410sonicwall sma6210_firmware: Code-Injection
- CVE-2026-15410SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Code Injection Vulnerability
- CVE-2026-15409SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Affected vendors and products
More on SonicWall
Other advisories
- CriticalCVE-2026-102257SonicWall SMA1000: Mehrere Schwachstellen
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-100232SonicWall Network Security Manager (NSM): Betriebssystem-Befehlsinjektion
- HighCVE-2026-96540SonicWall Network Security Manager (NSM): fehlerhafte Autorisierung
- CriticalCVE-2026-102255Critical Vulnerability in SonicWall SMA1000 Series
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
- MediumCVE-2026-102258SonicWall SMA: Cross-Site-Scripting (XSS)
Other news entries
- Multiples vulnérabilités dans Sonicwall Network Security Manager (15 octobre 2026)NewsCERT-FR (ANSSI)
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under AttackNewsDark Reading
- Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After PatchNewsThe Hacker News
- Critical SonicWall Vulnerability Exploited Days After DisclosureNewsSecurityWeek
- Max severity SonicWall SMA1000 flaw now exploited in attacksNewsBleepingComputer
- SonicWall and Splunk Patch Critical VulnerabilitiesNewsSecurityWeek
- SonicWall SMA1000: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID