Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution.

The vulnerabilities are listed below -

CVE-2026-15409 (CVSS score: 10.0) - A Server-side request forgery (SSRF) vulnerability that a remote unauthenticated attacker could exploit to potentially cause the appliance to make requests to an unintended location.

CVE-2026-15410 (CVSS score: 7.2) - A post-authentication code injection vulnerability rooted in the Appliance Management Console (AMC) that a remote authenticated attacker could exploit to execute arbitrary operating system commands as administrator under certain conditions.

Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security

The vulnerabilities are listed below -

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Other newsrooms on this story

Related reading

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

Other newsrooms on this story

Related reading

SonicWall SMA1000 flaws exploited as zero-days to push custom malware

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Inc Ransomware Exploits SonicWall SMA Zero-Days

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch