#SonicWall
All CosmicBytez Labs articles tagged #SonicWall, across news, security advisories, how-to guides, and projects.
- News
Attackers Exploit Two Chained Zero-Days in SonicWall SMA 1000 Appliances
SonicWall discloses two SMA 1000 zero-days, one CVSS 10.0, chained for unauthenticated RCE and now on CISA's KEV list with active exploitation.
- News
Attackers Chain Two New Zero-Days in SonicWall's Besieged SMA 1000
CVE-2026-83548 and CVE-2026-83549 chain into unauthenticated RCE on SonicWall SMA 1000 — the fifth SMA 1000 KEV entry since December.
- News
Attackers Chain Two SonicWall SMA 1000 Zero-Days in Active Attacks
SonicWall confirms active exploitation of two chained SMA 1000 zero-days — a pre-auth SSRF (CVSS 10.0) and post-auth command injection.
- News
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
SonicWall confirms active exploitation of a chained SSRF and OS command injection pair in SMA 1000 appliances, its third such attack chain in a year.
- Security
CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
A post-auth OS command injection in the SMA1000 Management Console, chained with a pre-auth SSRF flaw, gives attackers unauthenticated root-level RCE.
- Security
SonicWall GMS Unauthenticated Command Injection RCE
A critical unauthenticated command injection flaw in SonicWall GMS 9.5.1 and earlier allows remote attackers to execute arbitrary code via crafted requests.
- News
Prolific Ransomware Group Behind SonicWall Zero-Day Attacks
INC ransomware — responsible for nearly 900 victims across 71 countries — has emerged as the dominant actor exploiting a chained pair of SonicWall SMA...
- News
INC Ransomware Emerges as Dominant Threat Actor Exploiting SonicWall SMA 1000 Flaws
INC Ransomware has emerged as the dominant threat actor accelerating exploitation of recently disclosed SonicWall Secure Mobile Access 1000 series VPN...
- News
SonicWall SMA1000 Flaws Exploited as Zero-Days to Push Custom Malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks before patches were available, allowing threat...
- News
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Threat actor UTA0533 exploited two SonicWall zero-day vulnerabilities — CVE-2026-15409 and CVE-2026-15410 — to deploy custom malware against targets weeks...
- News
Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
A single request shouldn't be able to do this much. This week delivered pre-authenticated WordPress RCE, dual SonicWall zero-days exploited since June, a...
- News
SonicWall SMA 1000 Zero-Days Exploited in the Wild Before Public Disclosure
A previously undocumented threat actor tracked as UTA0215 by Volexity exploited multiple zero-day vulnerabilities in SonicWall Secure Mobile Access 1000...
- News
Inc Ransomware Exploits Chained SonicWall SMA Zero-Days for Root Access
The Inc ransomware group is actively exploiting two chained zero-day vulnerabilities in SonicWall Secure Mobile Access appliances. When combined, the...
- News
SonicWall Warns of Two Zero-Day Exploits Targeting SMA1000 — Patch Immediately
SonicWall has issued an urgent advisory warning of two zero-day vulnerabilities in its SMA1000 appliances — CVE-2026-15409 and CVE-2026-15410 — that can...
- News
SonicWall Warns of SMA1000 Flaws Exploited in Zero-Day Attacks, Patch Now
SonicWall has issued an urgent advisory warning that two vulnerabilities in its SMA 1000 series secure remote access appliances are being actively...
- News
Hackers Bypass SonicWall VPN MFA Due to Incomplete Patching
Threat actors brute-forced credentials and bypassed multi-factor authentication on SonicWall Gen6 SSL-VPN appliances to deploy ransomware tools,...
- News
ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force
This week's threat roundup covers an unpatched Microsoft Defender zero-day, active SonicWall brute-force campaigns, a 17-year-old Excel RCE vulnerability...
- Security
China-Linked Hackers Exploit VMware ESXi Zero-Days to Escape VMs
Sophisticated attack chain leverages compromised SonicWall VPN and VMware ESXi vulnerabilities to break out of virtual machine isolation and compromise...