SonicWall SMA 1000 Appliances Compromised by Two Active Zero‑Days, One Grants Full Admin Access
SonicWall confirmed that two zero‑day flaws in its SMA 1000 series – CVE‑2026‑15409 (critical SSRF, CVSS 10) and CVE‑2026‑15410 (code injection) – are being exploited in the wild. Chaining the bugs lets an unauthenticated attacker execute arbitrary commands with admin privileges. SonicWall issued emergency patches; users must upgrade now to secure remote access.