The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical SonicWall SMA1000 vulnerability, tracked as CVE-2026-15409, to its Known Exploited Vulnerabilities (KEV) catalog after confirming exploitation in real-world attacks. The flaw, a maximum-severity server-side request forgery (SSRF) bug, was weaponized as a zero-day alongside a second vulnerability affecting SonicWall secure remote-access appliances. CVE-2026-15409 […]
The post CISA Warns of Actively Exploited Critical SonicWall SMA1000 SSRF Flaw in Zero-Day Attacks appeared first on Cyber Security News.