Critical SonicWall SMA1000 Vulnerabilities Under Active Exploitation

SonicWall SMA1000 Series appliances are affected by two actively exploited critical vulnerabilities: CVE-2026-15409 (SSRF, CVSS 10.0) and CVE-2026-15410 (post-auth code injection, CVSS 7.2). Affected models include SMA1000 Series 6210, 7210, and 8200v running specific firmware versions; SonicWall and CISA have urged immediate patching after the flaws were added to the CISA KEV catalog on July 14, 2026.