SonicWall Zero-Days Exploited Before Patch

Two SonicWall zero-days, CVE-2026-15409 and CVE-2026-15410, were exploited by threat actor UTA0533 to deliver custom malware for weeks before a patch was released. Volexity tracked the campaign targeting SonicWall devices.