{"uuid": "af64bb80-d9e0-407c-881b-e67a3edc3e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15410", "type": "seen", "source": "https://t.me/pphm_HackerNews/2407", "content": "\ud83d\udd34 Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks\n\nThe INC Ransomware group is responsible for most of the recent activity surrounding two fresh vulnerabilities in SonicWall\u2019s SMA1000 secure remote access appliances, Resecurity reports.\n\nTracked as CVE-2026-15409 (CVSS score of 10) and CVE-2026-15410 (CVSS score of 7.2), the security defects allow unauthenticated remote attackers to open a WebSocket tunnel to restricted services and escalate their privileges to root.\n\nPatched on July 14 and added to CISA\u2019s Known Exploited Vulnerabilities (KEV) catalog on the same day, the two flaws had been exploited in the wild as zero-days since at least June 22.", "creation_timestamp": "2026-08-21T23:00:07.172785Z"}