U.S. CISA adds SonicWall and Microsoft flaws to its Known Exploited Vulnerabilities catalog
ID: 2874190d-bbf8-5cb9-bb2e-d39be8259f49
STIX ID: report--2874190d-bbf8-5cb9-bb2e-d39be8259f49
Feed Name: Security Affairs
Threat Score
CISA added four flaws to its Known Exploited Vulnerabilities catalog: two actively exploited SonicWall SMA1000 vulnerabilities (CVE-2026-15409 SSRF, CVE-2026-15410 post-auth code injection) and two Microsoft vulnerabilities (ADFS and SharePoint) identified as zero-days; SonicWall confirmed active in-the-wild exploitation and CISA issued federal patching deadlines in July 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.