{"uuid": "da71da5e-fc30-425a-8b1a-bf56c89a4d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15409", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2586", "content": "\ud83d\udd34 CISA Warns SonicWall SMA1000 Flaws Are Exploited in Ransomware Attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in SonicWall SMA1000 to its Known Exploited Vulnerabilities catalog, noting that the flaw has been used in ransomware campaigns.\n\nThis vulnerability, tracked as CVE-2026-15409, is a server-side request forgery (SSRF) issue found in the Workplace interface of SonicWall SMA1000 appliances.\n\nIt has a maximum CVSS score of 10.0. It can be exploited remotely without authentication, allowing an attacker to make requests to unintended internal or external locations.", "creation_timestamp": "2026-08-23T00:00:46.878962Z"}