{"uuid": "1e3d02d1-c1bc-491a-bc2c-a489b7e36175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15409", "type": "seen", "source": "https://t.me/pphm_HackerNews/2152", "content": "\ud83d\udd34 Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances\n\nUnknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available.\n\nVolexity published its findings after conducting an incident response investigation involving a compromised organization whose SonicWall SMA 1000 series VPN appliances were hit with zero-day exploits starting June 22, 2026. The threat actor, which Volexity tracks as UTA0533, chained two vulnerabilities, respectively tracked as CVE-2026-15409 (CVSS score of 10.0) and CVE-2026-15410 (CVSS score of 7.2) to achieve root-level access on the devices before patches existed.\n\nSonicWall patched both vulnerabilities this week and confirmed the active exploitation of the two zero-day vulnerabilities. The vulnerabilities were internally discovered and reported by Adam Babis of the company\u2019s PSIRT.", "creation_timestamp": "2026-08-22T00:00:12.047980Z"}