CISA
CISA KEV Catalog Highlights SonicWall SMA1000 Flaw CVE-2026-15409
The Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as a comprehensive resource for managing and prioritizing vulnerabilities exploited in real-world scenarios. Organizations can utilize the catalog to inform their vulnerability management strategies. Notably, it includes information on CVE-2026-15409, a server-side request forgery vulnerability in SonicWall SMA1000 Appliances, which could be exploited by remote attackers to make unauthorized requests.
The catalog offers additional resources in various formats (CSV, JSON) and encourages stakeholders to nominate any unlisted vulnerabilities. Action items include applying vendor mitigations and adhering to specific CISA guidelines for patching.
Story timeline CVE-2026-15409
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 14 Jul · 22:23 UTC | CISA | CISA KEV Catalog Highlights SonicWall SMA1000 Flaw CVE-2026-15409 (this article) |
| Mon 3 Aug · 03:01 UTC | SecurityOnline | SonicWall SMA Exploit Chain Now Fuels INC Ransomware Attacks |
| Mon 3 Aug · 11:01 UTC | SecurityWeek | INC Ransomware exploits CVE-2026-15409, gains root on SonicWall |
| Tue 4 Aug · 14:31 UTC | Security Affairs | INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victims |
| Fri 11 Sep · 07:13 UTC | SecurityOnline | SonicWall Flaw Exposed 160 Active Directory Domains to Attackers |
| Fri 11 Sep · 07:48 UTC | Security Affairs | SonicWall VPN Flaw Exposed Credentials Across 250 Organisations |
| Mon 12 Oct · 11:30 UTC | The Hacker News | Hackers Exploit Critical SonicWall SMA Flaw Within Days of Disclosure |
| Fri 23 Oct · 18:36 UTC | The Hacker News | AI Agents Power Ransomware Affiliates’ Attacks on Edge Devices |