CVE-2026-15409

SonicWall SMA 1000 Flaw (CVE-2026-15409) Hits UK Council Diagram of the active SonicWall SMA 1000 campaign and SonicWall SMA 1000 campaign attack flow

Diagram of the active SonicWall SMA 1000 campaign and SonicWall SMA 1000 campaign attack flow

SonicWall SMA 1000 Flaw (CVE-2026-15409) Hits UK Council

Do Son September 11, 2026

At a Glance Category Details Actor or Group Unattributed threat actor (Chinese-language artifacts observed) Activity Type Mass...

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware

Do Son July 19, 2026

At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type...

SonicWall SMA1000 CVE-2026-15409 (CVSS 10.0) RCE Exploited in the Wild as Public PoC Drops SonicWall SMA1000 vulnerability CVE-2026-15409 remote code execution exploited in the wild

SonicWall SMA1000 vulnerability CVE-2026-15409 remote code execution exploited in the wild

SonicWall SMA1000 CVE-2026-15409 (CVSS 10.0) RCE Exploited in the Wild as Public PoC Drops

Do Son July 16, 2026

TL;DR SonicWall patched a critical SonicWall SMA1000 vulnerability, CVE-2026-15409, on July 14, 2026. Attackers are exploiting it...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-87827CVSS 10.0
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-78006CVSS 9.8
The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-39364
Vite is a frontend tooling framework for JavaScript. From 7.1.0 to before 7.3.2 and 8.0.5, on the Vite...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-27540CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture...
Admin intel📅 Updated: Sep 15, 2026
CVE-2026-76461CVSS 9.8
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an...
CISA KEV📅 Added to KEV: Sep 14, 2026
CVE-2026-51990
A critical remote code execution vulnerability in Sogou Input Method, one of the most widely used Chinese-language input...
Admin intel📅 Updated: Sep 12, 2026
CVE-2026-85706CVSS 10.0
GitLab has remediated an issue that, under certain conditions, an unauthenticated user could have read arbitrary files from...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026
CVE-2026-42016CVSS 8.1
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation...
Admin intelCISA KEV📅 Added to KEV: Sep 11, 2026📅 Updated: Sep 11, 2026