Signalis
sign in--:--:--UTC
CVEs

CVE-2024-40766

exploited in the wild☆ pin
CVSS
6.8
Reports
12
First seen
Aug 23, 2024
Last seen
Sep 10, 2026
Affected product

SonicWall SonicOS (Gen 5, 6, 7)

Associated actors

Akira ×2BigBear 2.0 ×1BlackSuit ×1BrazenBamboo ×1Chinese-speaking AI-assisted intrusion operator ×1Clop ×1CyberAv3ngers ×1Devman ×1DireWolf ×1DragonForce ×1Electronic Operations Room of Islamic Resistance Axis ×1Handala Hack Team ×1Kazu ×1Malone Lam ×1MintEye ×1NightSpire ×1NoName057(16) ×1Qilin ×1RansomHub ×1Scattered Spider ×1

Recent reports

High

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

The Hacker NewsMedium

Schneider Electric Easergy MiCOM Px40 Series Hard-Coded Credentials Vulnerability

CISA Advisoriesunrated

2026 World Cup: Cyber Attack Surface and Threat Assessment

Palo Alto Unit 42High

ABB Terra AC Wallbox Heap-Based Buffer Overflow Vulnerability

CISA AdvisoriesHigh

Siemens Ruggedcom Rox Improper Access Control Vulnerability

CISA AdvisoriesHigh

State of ransomware in 2026: post-quantum cryptography, encryptionless extortion, and industrialized access brokers

Kaspersky SecurelistHigh

Threat Actor Abuses Elastic Cloud Free Trial for Victim Data Exfiltration and Triage

Huntress BlogCritical

Active Exploitation of SonicWall VPNs by Akira Ransomware Operators

Huntress BlogCritical

High Threat Security Alert: SonicWall Gen 7 Firewalls SSLVPN Vulnerability Exploitation

GovCERT.HKHigh

BrazenBamboo Weaponizes FortiClient Zero-Day to Steal VPN Credentials via DEEPDATA

VolexityHigh

SonicOS High-Risk Security Vulnerability (CVE-2024-40766) – Immediate Patching Required

NICS TaiwanHigh

High Threat Security Alert: Vulnerability in SonicWall Products (CVE-2024-40766)

GovCERT.HK

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans