#sma1000


Max severity SonicWall SMA1000 flaw now exploited in attacks

Oct 9, 2026 // 15:36

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. Tracked as CVE-2026-102255, the flaw affects […]

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

Oct 7, 2026 // 19:24

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company’s network and applications. The […]

SonicWall warns of max severity SSRF flaw in SMA1000 gateways

Oct 7, 2026 // 14:56

SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. Tracked as CVE-2026-102255, the vulnerability was found in […]

SonicWall warns of actively exploited SMA1000 zero-day flaws

Sep 2, 2026 // 11:37

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks. The first is a maximum-severity command injection […]

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

Aug 10, 2026 // 18:21

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. ​SMA1000 is […]

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Jul 21, 2026 // 01:36

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. Last […]

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

Jul 15, 2026 // 00:36

SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly […]