{"uuid": "6ce344d8-3115-4d8b-a280-d4f5b8272934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15410", "type": "seen", "source": "https://t.me/pphm_HackerNews/2152", "content": "\ud83d\udd34 Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances\n\nUnknown hackers exploited two SonicWall SMA 1000 zero-days to gain root access on VPN appliances before patches became available.\n\nVolexity published its findings after conducting an incident response investigation involving a compromised organization whose SonicWall SMA 1000 series VPN appliances were hit with zero-day exploits starting June 22, 2026. The threat actor, which Volexity tracks as UTA0533, chained two vulnerabilities, respectively tracked as CVE-2026-15409 (CVSS score of 10.0) and CVE-2026-15410 (CVSS score of 7.2) to achieve root-level access on the devices before patches existed.\n\nSonicWall patched both vulnerabilities this week and confirmed the active exploitation of the two zero-day vulnerabilities. The vulnerabilities were internally discovered and reported by Adam Babis of the company\u2019s PSIRT.", "creation_timestamp": "2026-08-21T23:00:08.246206Z"}