CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability.
SonicWall SMA1000 Appliances Code Injection Vulnerability. SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
- CISA KEV-listed (remediation due 2026-07-17)
- used in ransomware campaigns
- EPSS 11.8% (95.8% percentile)
- CVSS 7.2 high
Related briefings
- Most AI attacks are still fake installers, Sophos finds 2026-08-19
- Hackers exploit SonicWall remote access appliances, CISA warns 2026-07-14