Tag: sma1000
6 articles
SonicWall SMA1000 flaw exploited in targeted attacks
A critical vulnerability, CVE-2026-102255, in SonicWall SMA1000 appliances is being exploited in targeted attacks, putting sensitive internal functionality at risk. This maximum-severity flaw allows remote attackers to manipulate the appliance and perform unauthorized operations.
SonicWall Fixes CVSS 10.0 Flaw in SMA1000 Appliances
SonicWall has patched a critical security flaw in its SMA1000 appliances that could let attackers infiltrate internal systems and run unauthorized operations. The bug, rated 10.0 on the CVSS scale, can be exploited before login, making it a high-risk vulnerability.
SonicWall Disrupts SSRF Flaw in SMA1000 Gateways
Don't let your SonicWall SMA1000 gateways become an open door for hackers - a critical SSRF flaw, CVE-2026-102255, has been discovered, allowing attackers to make internal requests without authorization, and hotfixes are available to patch this vulnerability. Over 400 Internet-exposed appliances are currently at risk, making immediate action crucial.
SonicWall SMA1000 boxes targeted in active zero-day attacks
Hackers are actively exploiting two zero-day vulnerabilities in SonicWall's Secure Mobile Access (SMA) Series 1000 appliances, potentially allowing unauthorized access to sensitive functionality and malicious operations. This critical threat has prompted SonicWall to warn users of its SMA1000 boxes to take immediate action.
Ransomware gangs exploit SonicWall SMA1000 flaws
Ransomware gangs are actively exploiting two recently patched flaws in SonicWall's SMA1000 remote-access gateway, which can let attackers hijack vulnerable servers and send requests on their behalf. The vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, were patched in mid-July, but threat actors are now using them in real-world attacks.
SonicWall Disrupts Zero-Day Attacks with Urgent Patch for SMA1000 Flaws
SonicWall has issued a critical patch to combat zero-day attacks exploiting two vulnerabilities in its SMA1000 line, with attackers already taking advantage of these flaws in the wild. The company urges immediate action to prevent further damage from these actively exploited security gaps.