ThreatVectr
Tag

#SonicWall

10 stories taggedSonicWall.

Illustration: a rack-mounted network security appliance in a dim server room, status LEDs glowing amber and red
Vulnerabilities

Rapid7 Caught Hackers Hitting SonicWall Remote Access Boxes Before the Patch

A perfect-10 flaw in SonicWall's SMA1000 gateways was already under attack when the vendor shipped its July 14 hotfix. Here is what the filing actually says.

3 min read
A network operations center displaying security alerts and vulnerability notifications on multiple screens, with CISA threat bulletin information visible on the
Vulnerabilities

CISA flags seven actively exploited flaws, including two in SonicWall SMA1000 boxes

The US cyber agency's Known Exploited Vulnerabilities catalog picks up bugs in Sangoma, JFrog, LiteLLM, Kestra, Starlette and a pair in SonicWall's remote access appliances.

4 min read
A network security technician working at a control station with VPN authentication systems displayed, emergency patches being deployed to remote-access boxes sh
Vulnerabilities

SonicWall Patches Two VPN Zero-Days Already Being Used by Hackers

A perfect-10 flaw in SonicWall's SMA 1000 remote-access boxes lets attackers slip past the login screen, and it's being paired with a second bug in real attacks.

3 min read
A SonicWall security platform interface on a monitor marked as deprecated or retired, with critical vulnerability patches being applied to legacy infrastructure
Vulnerabilities

SonicWall Patches Critical Flaws in a Security Platform It Already Retired

Two vulnerabilities scored near-perfect danger ratings and could let criminals break into systems without a password. One of the affected products was officially shut down last October.

3 min read
A network rack in a corporate server room showing a SonicWall appliance with its indicator lights glowing, surrounded by layers of other security hardware, cabl
Ransomware

Ransomware crews are now breaking into SonicWall VPN boxes through two July flaws

CISA says gangs are exploiting a maximum-severity SonicWall SMA1000 bug patched in mid-July. Around 380 appliances are still sitting online.

3 min read
A corporate network diagram with SonicWall device icons highlighted in red, connected to multiple compromised systems across a geographical map, with phone hand
Ransomware

INC Ransomware Gang Is Exploiting Two Critical SonicWall Flaws, And Calling Victims Afterward

A ransomware group has weaponised two newly discovered holes in widely used remote-access devices, hitting targets across five countries, then cold-calling victims to pile on the pressure.

3 min read
Illustration: a dimly lit server room with rows of blue-lit rack equipment, one open rack door revealing exposed cabling
Threat Intelligence

A Week When Small Inputs Caused Big Damage

WordPress code execution, SonicWall zero-days, attacks on AI services, and a fresh SharePoint flaw made for a punishing seven days.

3 min read
Illustration for the story: SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning
Vulnerabilities

SonicWall VPN Appliances Hit by Zero-Day Attacks Weeks Before Public Warning

A newly identified group, tracked as UTA0533, broke into SonicWall SMA 1000 devices using unknown flaws from late June 2026 and gained the highest level of access on the affected hardware.

3 min read
A network security dashboard displayed across multiple monitors showing warning alerts and breach notifications, with a keyboard and mouse in the foreground sug
Vulnerabilities

Ransomware Gang Exploited Two SonicWall Security Flaws Before a Fix Existed

A group tied to Inc ransomware broke into enterprise networks through a pair of critical holes in SonicWall remote-access devices, stealing credentials and preparing to lock down files.

3 min read
Illustration: a rack-mounted network security appliance in a dim server room, blue and amber status LEDs glowing
Vulnerabilities

SonicWall says two SMA1000 flaws are being used in live attacks

One bug scores a perfect 10 on the severity scale. Federal agencies have until 17 July 2026 to patch or pull the plug.

3 min read
© 2026 Threat Vectr