Signalis
sign in--:--:--UTC
CVEs

CVE-2026-15409

exploited in the wild☆ pin
CVSS
10.0
Reports
21
First seen
Jul 14, 2026
Last seen
Sep 2, 2026
Affected product

SonicWall SMA 1000

Associated actors

UTA0533 ×5The Gentlemen ×2INC Ransom ×2CyberArmy of Russia Reborn ×1CylindricalCanine ×1DragonForce ×1ExfilSquad ×1GoldenEyeDog ×1Helix ×1INC Ransomware ×1JADEPUFFER ×1Kratos ×1O-UNC-066 ×1Qilin ×1Russian state-sponsored actors ×1Salt Typhoon ×1Scattered Spider ×1ShinyHunters ×1TencShell ×1The Com ×1

Recent reports

Critical

SonicWall SMA 1000 Zero-Days Exploited in Active Attacks; CVE-2026-83548 and CVE-2026-83549

The Hacker NewsCritical

SonicWall warns of actively exploited SMA1000 zero-day flaws

Bleeping ComputerHigh

Fake AI, Real Malware: Attackers Impersonating AI Brands in 38 MDR Cases

Sophos NewsCritical

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

Bleeping ComputerHigh

INC Ransomware Exploiting SonicWall Zero-Day Vulnerabilities Post-Disclosure

CyberScoopCritical

INC Ransomware Exploiting SonicWall SMA 1000 Zero-Days as Dominant Threat Actor

The Hacker NewsHigh

Cyber Brief July 2026 – EU Threat Intelligence Summary

CERT-EU Threat IntelHigh

InfraTrust Pulse identifies 61 infrastructure vulnerabilities admins should prioritize

Bleeping ComputerHigh

SonicWall SMA 1000 Series Multiple High-Risk Vulnerabilities (CVE-2026-15409, CVE-2026-15410)

NICS TaiwanCritical

SonicWall SMA1000 zero-day flaws exploited to deploy custom malware

Bleeping ComputerCritical

Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day

The Hacker NewsHigh

Check Point Threat Intelligence Report – 20 July 2026

Check Point ResearchCritical

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

The Hacker NewsCritical

SonicWall customers under threat as attackers exploit 2 zero-days

CyberScoopCritical

SonicWall SMA 1000 Zero-Days Under Active Exploitation; One Enables Admin Command Execution

The Hacker NewsCritical

Multiple Vulnerabilities in SonicWall SMA1000 Products Being Exploited

GovCERT.HKHigh

SonicWall SMA1000 Series Products Multiple Vulnerabilities

HKCERTCritical

SonicWall SMA1000 vulnerabilities in active exploitation

Sophos NewsCritical

SonicWall warns of SMA1000 zero-day flaws actively exploited in attacks

Bleeping ComputerCritical

SonicWall SMA1000 Critical Vulnerabilities CVE-2026-15409 & CVE-2026-15410 Exploited in the Wild

Canadian Centre AlertsHigh

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA Advisories

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans