--- title: SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day... description: SonicWall has patched two actively exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances. CVE-2026-15409 is a Server-Side... canonical: https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited | daily.dev og:description: SonicWall has patched two actively exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances. CVE-2026-15409 is a Server-Side... og:url: https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok og:image: https://api.daily.dev/og/posts/2ZFTLTCok.png og:image:alt: SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited **[Tenable Blog](https://daily.dev/sources/tenable-blog)** · 4 min read · 0 upvotes · 0 comments ## Summary SonicWall has patched two actively exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances. CVE-2026-15409 is a Server-Side Request Forgery (SSRF) flaw in the Workplace interface, while CVE-2026-15410 is a code injection vulnerability in the Appliance Management Console (AMC). When chained, these flaws enable unauthenticated remote code execution on affected devices. Both CVEs have been added to CISA's Known Exploited Vulnerabilities catalog with a remediation deadline of July 17. Patches are available for SMA1000 models 6210, 7210, and 8200v. No public proof-of-concept exists yet, but immediate patching is strongly recommended given the historical targeting of SonicWall devices by ransomware groups. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs](https://daily.dev/posts/cisa-sonicwall-sma1000-flaws-now-exploited-by-ransomware-gangs-x9e9rvfsr) · BleepingComputer · 0 upvotes · 0 comments - [Another bad week for SonicWall as SMA 1000 0-day exploited](https://daily.dev/posts/another-bad-week-for-sonicwall-as-sma-1000-0-day-exploited-vbcm0llpl) · The Register · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited","url":"https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok"},"datePublished":"2026-07-15T17:41:13.854Z","dateModified":"2026-07-20T22:44:30.730Z","description":"SonicWall has patched two actively exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances. CVE-2026-15409 is a Server-Side...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d40a945707a72b51251f68d426fdb283?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d40a945707a72b51251f68d426fdb283?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Tenable Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Tenable Blog","logo":"https://media.daily.dev/image/upload/s--B6GAvw3H--/f_auto,q_auto/v1780213271/logos/tenable-blog?_a=BAMAMiWQ0","url":"https://daily.dev/sources/tenable-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/sonicwall-cve-2026-15409-and-cve-2026-15410-zero-day-exploited-2zftltcok","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,zero-day","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tenable Blog","item":"https://daily.dev/sources/tenable-blog"},{"@type":"ListItem","position":3,"name":"SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited"}]} ```