SonicWall Issues Patch for Exploit Chain in SMA Devices

SonicWall disclosed three high-severity vulnerabilities in its Secure Mobile Access (SMA) 100 Series (CVE-2025-32819, CVE-2025-32820, CVE-2025-32821) that, when chained, let attackers delete the appliance database to reset the admin password, make arbitrary directories writable, and execute a root-level malicious file—resulting in near-total device compromise. Rapid7 assesses the primary flaw has been exploited in the wild; SonicWall issued firmware 10.2.1.15-81sv and recommends enabling MFA, using WAFs, and scanning for unauthorized logins.