SONICWALL PATCHES ZERO-DAY FLAWS IN SMA1000

SonicWall disclosed two zero-day flaws in the SMA1000 secure mobile access appliance, tracked as CVE-2026-15409 and CVE-2026-15410. Threat actors are actively exploiting both vulnerabilities in the wild. The company has released patches to address the issues and recommends all customers install updates without delay. SonicWall did not disclose technical details about the flaws or their severity ratings. The SMA1000 is a remote access appliance used by organizations to enable secure connectivity for mobile workers and remote offices. The zero-day attacks underscore ongoing risks to VPN and remote access infrastructure, which remain frequent targets for cybercriminals seeking network entry points. Users should prioritize deploying the security updates across their SMA1000 deployments. Organizations should also monitor for indicators of compromise on affected systems.