Critical SonicWall SSRF Zero-Day Opens WebSocket Tunnel to Internal Services
Thu Jul 16 2026
Networking
Patch Management
Vulnerability
Zero-day
cyberpress.org
SonicWall published a security advisory on July 14, 2026, addressing two actively exploited vulnerabilities affecting its SMA1000 Series remote access appliances. The flaws include a maximum-severity server-side request forgery (SSRF) vulnerability (CVE-2026-15409, CVSS 10.0) and a high-severity code injection vulnerability (CVE-2026-15410). SonicWall urges customers to apply platform hotfix releases immediately. CVE-2026-15409 allows an unauthenticated attacker […]
The post Critical SonicWall SSRF Zero-Day Opens WebSocket Tunnel to Internal Services appeared first on Cyber Security News.