SonicWall SMA1000 Zero-Days Exploited in Attacks

SonicWall warns that two SMA1000 zero-day vulnerabilities, CVE-2026-15409 (CVSS 10.0) and CVE-2026-15410 (CVSS 7.2), are under active attack. The flaws affect SMA1000 models 6210, 7210, and 8200v. Patches are available in platform-hotfix versions 12.4.3-03453 and 12.5.0-02835. CISA added both to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch by July 17, 2026.