High Threat Security Alert (A26-07-20): Multiple Vulnerabilities in SonicWall Products

Description:

SonicWall released a security advisory to address multiple vulnerabilities in SonicWall systems. An attacker could exploit these vulnerabilities by sending specially crafted requests to an affected system.

Reports indicated that a security restriction bypass vulnerability (CVE-2026-15409) and a remote code execution vulnerability (CVE-2026-15410) are being exploited in the wild. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• SonicWall SMA1000 versions 12.4.3-03245, 12.4.3-03387 and 12.4.3-03434 (platform-hotfix)
• SonicWall SMA1000 versions 12.5.0-02283, 12.5.0-02624 and 12.5.0-02800 (platform-hotfix)

For detailed information of the affected systems, please refer to the corresponding security advisories at vendor's website.

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution or security restriction bypass on an affected system.

Recommendation:

Patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008
• https://www.hkcert.org/security-bulletin/sonicwall-sma1000-series-products-multiple-vulnerabilities_20260715
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15409 (to CVE-2026-15410)