CVE-2026-15409 and CVE-2026-15410 in SonicWall SMA1000 enable unauthenticated and authenticated attacks with severity 10.0; immediate patches required, no workarounds available.
Two critical vulnerabilities in SonicWall SMA1000 (CVE-2026-15409 SSRF with CVSS 10.0, CVE-2026-15410 Code Injection with CVSS 7.2) are being actively exploited in production; hotfixes available, forensic investigation required.
