> TritonInfoSec News
Home / Jul 16, 2026 / Story
0
#2 The Hacker News general July 15, 2026 at 05:30 UTC

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

By [email protected] (The Hacker News)

AI Summary

SonicWall disclosed two actively exploited zero-days in its SMA 1000 series appliances: CVE-2026-15409 (CVSS 10.0), a server-side request forgery flaw enabling unauthenticated remote command execution, and CVE-2026-15410. Researchers note the vulnerabilities were chained together and were exploited roughly three weeks before SonicWall disclosed and patched them, meaning defenders had no window to respond. SMA 1000 appliances are widely deployed as enterprise remote access gateways.

Read full article → https://thehackernews.com/2026/07/two-sonicwall-sm…

Relevance score: 93.0/100

# More from July 16

  1. 1
    Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days BleepingComputer
  2. 3
    CISA warns admins to patch actively exploited SharePoint flaws BleepingComputer
  3. 4
    Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday The Hacker News
  4. 5
    Microsoft’s Secure Boot has been broken for a decade and no one noticed until now Ars Technica Security
  5. 6
    US charges alleged operators of Russian bulletproof hosting service BleepingComputer
  6. 7
    Microsoft Patches a Record 570 Security Flaws Krebs on Security
  7. 8
    New phishing kits target Microsoft 365 accounts, evade MFA BleepingComputer
  8. 9
    Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News
  9. 10
    23andMe reaches $18 million settlement with states for massive breach The Record