logo

Inc Ransomware Exploits Chained SonicWall SMA Zero-Days for Root Access

ID: 0f2fb32b-0da4-54b9-abea-4e6df36f7d02

STIX ID: report--0f2fb32b-0da4-54b9-abea-4e6df36f7d02

Feed Name: CosmicBytez Labs

Threat Score
90/100

Date Published: 2026-07-17

Date Updated: 2026-07-17

...
...

**Inc ransomware** operators are actively chaining two previously unknown zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) appliances to achieve unauthenticated root-level control, enabling VPN session interception, credential harvesting, and lateral movement; the report details the actor's profile, risks to internet-facing SMA devices, immediate mitigations, and that SonicWall has been notified and is preparing patches.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.