SonicWall urges admins to patch VPN flaw exploited in attacks

SonicWall urged customers to apply firmware 10.2.1.15-81sv or later to address three chained vulnerabilities in SMA100-series appliances (CVE-2025-32819/32820/32821) that allow an attacker with an SSLVPN account to reset admin credentials, make system directories writable, and achieve root remote code execution; Rapid7 reports the chain may have been used in the wild and recommends reviewing logs and enabling WAF and MFA.