Attackers Exploit Two Sonic Wall SMA 1000 Zero-Days That May Form an Attack Chain
Summary: SonicWall released security updates for two zero-day flaws in its Secure Mobile Access (SMA) 1000 series VPN appliances, affecting models 6210, 7210, and 8200v, with fixes in versions 12.4.3-03526 and 12.5.0-02952. The vulnerabilities were found internally by SonicWall's William Perry and Adam Babis, and SonicWall said it investigated a case indicating active exploitation, suggesting attackers are chaining the bugs to execute arbitrary code.
What you should know: SonicWall has not disclosed who is behind the exploitation or the nature of the activity, and this follows fixes just over a month earlier for two other SMA 1000 flaws, including a CVSS 10.0 bug, that threat actor UTA0533 exploited to deploy KNUCKLEBALL malware.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-15409CVE-2026-15410
- Related