Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

SonicWall has issued a warning about the active exploitation of two zero-day vulnerabilities in its Secure Mobile Access 1000 series appliances. One of these vulnerabilities could allow an attacker to execute arbitrary commands. The vulnerabilities include a Server-side request forgery vulnerability that can be exploited by a remote unauthenticated attacker. This particular vulnerability has a CVSS score of 10.0, indicating a high level of severity. SonicWall identified this vulnerability as CVE-2026-15409. The exploitation of these vulnerabilities is currently active.