SonicWall warns of actively exploited SMA1000 zero-day flaws

September 2, 2026 · BleepingComputer · Severity: CRITICAL

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks.

Key Takeaways

SonicWall alerted customers to two zero-day vulnerabilities in SMA1000 appliances being actively exploited.
Threat actors are chaining these zero-day flaws to achieve remote code execution on vulnerable systems.
Organizations using SMA1000 should immediately apply patches and monitor for signs of compromise.