SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now

SonicWall has issued a warning about the exploitation of two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410, in its SMA1000 product, which is being targeted by threat actors in active attacks. These flaws are being leveraged to compromise the security of affected systems, emphasizing the need for immediate patching. The vulnerabilities pose a significant risk, as they can be exploited to gain unauthorized access, allowing attackers to execute malicious code and steal sensitive data. SonicWall has released security updates to address these vulnerabilities, and users are advised to install them as soon as possible to prevent potential breaches. The disclosure of CVE-2026-15409, in particular, expands the attack surface, making it essential for organizations to prioritize patching based on their exposure and evidence of exploitation¹. This highlights the importance of prompt patch management to mitigate the risk of zero-day attacks, making it crucial for practitioners to take immediate action to secure their systems.