Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

🗓️ 15 Jul 2026 05:30:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 19 Views

Active exploitation of SonicWall Secure Mobile Access 1000 zero-days; patch to 12.4.3-03453+ or newer.

Reporter	Title	Published	Views	Family All 37
GithubExploit	Exploit for CVE-2026-15410	15 Jul 202602:31	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware	3 Aug 202614:59	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware	17 Jul 202617:30	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware	15 Jul 202615:37	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Sonicwall Sma6210_Firmware	15 Jul 202616:51	–	githubexploit
GithubExploit	Exploit for CVE-2026-15409	15 Jul 202602:30	–	githubexploit
ATTACKERKB	CVE-2026-15410	14 Jul 202619:43	–	attackerkb
ATTACKERKB	CVE-2026-15409	14 Jul 202619:39	–	attackerkb
BDU FSTEC	The vulnerability of the Appliance Work Place microprogramming software for SonicWall SMA 1000 network devices allows a perpetrator to execute an SRF attack.	15 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the control consoles for SonicWall SMA 1000 microprogrammed network interface devices allows attackers to execute arbitrary code.	15 Jul 202600:00	–	bdu_fstec

16 Jul 2026 08:12Current

7.2High risk

Vulners AI Score7.2

CVSS 3.110

EPSS0.83658

SSVC

sonicwall secure mobile access zero day patch update admin commands