Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

SonicWall SMA1000 Series appliances (models 6210, 7210, 8200v) are affected by two critical vulnerabilities—CVE-2026-15409 (unauthenticated SSRF, CVSS 10.0) and CVE-2026-15410 (post-authentication code injection, CVSS 7.2)—which are being actively exploited in the wild; CISA has added these to the KEV catalog and vendors/organizations are urged to apply patches immediately and monitor for indicators of compromise.