SonicWall SMA1000

Reported Context (2)

that the incident is linked to an actor performing mass exploitation of CVE-2026-15409 against SonicWall SMA1000 appliances. The operator gained command execution on appliances, extracted configurations, and Hunt.io Links UK Council Attack to SonicWall SMA1000 Exploitation Campaign
On September 1, 2026, SonicWall disclosed two vulnerabilities in SonicWall SMA1000 appliances. Models 6210, 7210, and 8200v are affected. SonicWall SMA1000 Vulnerabilities CVE-2026-83548 and CVE-2026-83549 Exploited in the Wild

CVE (3)

People (1)

MITRE ATT&CK (13)

Vendors (1)

Products (5)

Tools (15)

Industries (8)

Countries (12)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.