Since June 2026, a new wave of cyberattacks has been targeting SonicWall SMA 1000 series VPN appliances, allowing uninvited guests to gain full control of internal systems.
The researchers at Volexity discovered that attackers are using two critical vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, to bypass security measures entirely. This grants them root access, which is the digital equivalent of giving a stranger the master key to your entire home—they can access, change, or delete anything they find.
Threat actors, including the INC ransomware group, have been actively weaponizing these vulnerabilities to infiltrate corporate networks and hold data hostage.
This forced affected organizations to drop their regular tasks and conduct emergency incident response investigations to identify how far the hackers managed to get. Keeping this equipment updated is now the only way to lock the door.
A single broken lock can compromise the entire corporate vault.
How many more hidden vulnerabilities are waiting to be found in your office network?
#CyberSecurity #SonicWall #TechNews
Security Affairs
Subscribe
