Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-15 05:30 UTC
  • Importiert: 2026-07-21 11:40 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 38f4443c610673131fa1e770a0773dac9dbc5b9bdb9b973555dd52a1dc1ec0e9
The Hacker News

Inhalt

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution.

The vulnerabilities are listed below -

CVE-2026-15409 (CVSS score: 10.0) - A Server-side request forgery (SSRF) vulnerability that a remote unauthenticated attacker could exploit to

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-15409

CRITICAL

10

CRITICAL

10

0.06795

0.93945

2026-07-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste