SonicWall

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868)

Don't miss, firewall, Hot stuff, News, SonicWall, VPN, vulnerability /

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) 2026-11-09 at 12:30 By Zeljka Zorz SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication. With no workarounds listed, the company has urged admins to patch quickly. About CVE-2026-19868 CVE-2026-19868 is an authentication […]

Exploited SonicWall SSL-VPN flaw lets attackers bypass SAML-enforced MFA (CVE-2026-19868) Read More »

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

exploited, Featured, SonicOS, SonicWall, VPN, Vulnerabilities, vulnerability /

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins 2026-11-07 at 12:16 By Eduard Kovacs CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA. The post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins Read More »

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws

Cisco, patches, SonicWall, Vulnerabilities, vulnerability, WatchGuard /

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws 2026-11-05 at 14:33 By Ionut Arghire Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws. The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws Read More »

Critical SonicWall Vulnerability Exploited Days After Disclosure

exploited, Featured, SonicWall, Vulnerabilities, vulnerability /

Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »

SonicWall and Splunk Patch Critical Vulnerabilities

patch, SonicWall, Splunk, Vulnerabilities, vulnerability /

SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall and Splunk Patch Critical Vulnerabilities Read More »

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

Don't miss, enterprise, Hot stuff, MSP, News, security update, SonicWall, vulnerability /

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) 2026-10-07 at 13:37 By Zeljka Zorz SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality […]

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Read More »

SonicWall SMA 1000 appliances under attack via zero-day flaws

0-day, Don't miss, enterprise, exploit, Hot stuff, News, remote access, SonicWall /

SonicWall SMA 1000 appliances under attack via zero-day flaws 2026-09-02 at 13:13 By Zeljka Zorz Attackers are exploiting two previously undisclosed vulnerabilities (CVE-2026-83548, CVE-2026-83549) in SonicWall SMA 1000 appliances, the vendor confirmed on Tuesday. The vulnerabilities (CVE-2026-83548, CVE-2026-83549) The SonicWall SMA 1000 series is a line of secure remote access appliances (SSL VPN gateways) built […]

SonicWall SMA 1000 appliances under attack via zero-day flaws Read More »

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks

exploited, Featured, SMA1000, SonicWall, Vulnerabilities, vulnerability, Zero-Day /

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks 2026-09-02 at 08:04 By Eduard Kovacs The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks Read More »

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

GMS, SonicWall, Vulnerabilities, vulnerability /

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform 2026-08-12 at 10:31 By Ionut Arghire The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data. The post SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform Read More »

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks

exploited, Ransomware, SonicWall, Vulnerabilities, vulnerability /

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks 2026-08-03 at 13:39 By Ionut Arghire The INC Ransomware gang has been targeting vulnerable SMA1000 appliances for root access and lateral movement. The post Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks Read More »

SonicWall SMA zero-days were exploited weeks before disclosure

0-day, Don't miss, Hot stuff, intrusion, Malware, News, secure access, SonicWall, Volexity /

SonicWall SMA zero-days were exploited weeks before disclosure 2026-07-21 at 13:35 By Zeljka Zorz Two recently disclosed SonicWall SMA 1000 vulnerabilities – CVE-2026-15409 and CVE-2026-15410 – were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances, Volexity researchers revealed. The intrusions began as early as June 22, […]

SonicWall SMA zero-days were exploited weeks before disclosure Read More »

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch

exploited, Malware, Malware & Threats, SonicWall, Vulnerabilities, Zero-Day /

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch 2026-07-20 at 17:11 By Eduard Kovacs The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek. This article is an excerpt […]

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch Read More »

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits

exploited, SMA1000, SonicWall, Vulnerabilities, Zero-Day /

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits 2026-07-15 at 08:19 By Eduard Kovacs SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution. The post SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits Read More »

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)

0-day, CVE, Don't miss, enterprise, Government, Hot stuff, News, secure access, SonicWall /

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410) 2026-07-14 at 20:40 By Zeljka Zorz SonicWall has fixed two actively exploited vulnerabilities (CVE-2026-15409, CVE-2026-15410) affecting its Secure Mobile Access (SMA) 1000 Series appliances, and is urging customer organizations to upgrade to a fixed firmare version and search for evidence of potential compromise. If the outlined […]

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410) Read More »

SonicWall Urges Immediate Patching of Firewall Vulnerabilities

firewall, patches, SonicWall, Vulnerabilities, vulnerability /

SonicWall Urges Immediate Patching of Firewall Vulnerabilities 2026-04-30 at 18:18 By Ionut Arghire The bugs could be exploited to bypass security controls, access restricted services, and crash firewalls. The post SonicWall Urges Immediate Patching of Firewall Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Urges Immediate Patching of Firewall Vulnerabilities Read More »

Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities

Palo Alto Networks, patches, SonicWall, Vulnerabilities, vulnerability /

Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities 2026-04-09 at 15:44 By Ionut Arghire The bugs could allow attackers to modify protected resources and escalate their privileges to administrator. The post Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities Read More »

SonicWall Patches Exploited SMA 1000 Zero-Day

exploited, SonicWall, Vulnerabilities, Zero-Day /

SonicWall Patches Exploited SMA 1000 Zero-Day 2025-12-18 at 11:29 By Ionut Arghire The medium-severity flaw has been exploited in combination with a critical bug for remote code execution. The post SonicWall Patches Exploited SMA 1000 Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall Patches Exploited SMA 1000 Zero-Day Read More »

Actively exploited SonicWall zero-day patched (CVE-2025-40602)

0-day, Don't miss, Google Cloud, Hot stuff, News, SonicWall, vulnerability /

Actively exploited SonicWall zero-day patched (CVE-2025-40602) 2025-12-17 at 18:46 By Zeljka Zorz SonicWall has patched a local privilege escalation vulnerability (CVE-2025-40602) affecting its Secure Mobile Access (SMA) 1000 appliances and is urging customers to apply the provided hotfix, as the flaw is being leveraged by attackers. “This vulnerability was reported to be leveraged in combination […]

Actively exploited SonicWall zero-day patched (CVE-2025-40602) Read More »

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance

DoS, firewall, SonicWall, Vulnerabilities, vulnerability /

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance 2025-11-21 at 14:41 By Ionut Arghire The vulnerabilities could be exploited to cause a denial-of-service (DoS) condition, execute arbitrary code, or access arbitrary files and directories. The post SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance appeared first on SecurityWeek. This article is an excerpt […]

SonicWall Patches High-Severity Flaws in Firewalls, Email Security Appliance Read More »

SonicWall cloud backup hack was the work of a state actor

backup, cloud security, Don't miss, firewall, Hot stuff, Mandiant, News, SonicWall /

SonicWall cloud backup hack was the work of a state actor 2025-11-06 at 15:30 By Zeljka Zorz Incident responders from Mandiant have wrapped up their investigation into the SonicWall cloud backup service hack, and the verdict is in: the culprit is a state-sponsored threat actor (though the specific nation wasn’t disclosed). “[The incident] was isolated […]

SonicWall cloud backup hack was the work of a state actor Read More »

Scroll to Top