SonicWall SMA1000 flaws now exploited by ransomware gangs post, augustus 10, 2026augustus 17, 2026 CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. SMA1000 is an enterprise-grade secure remote access gateway used by large corporations, government agencies, and Managed Service Providers (MSSPs) to provide VPN access to internal applications and corporate networks. SonicWall released patches for the two security flaws (tracked as CVE-2026-15409 and CVE-2026-15410) in mid July, when it also warned that threat actors had been exploiting them in zero-day attacks. CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs: SonicWall SMA1000 flaws now exploited by ransomware gangs ransomware vulnerability 2026