Critical

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

darkreading

October 12, 2026 at 9:42 PM

Actively Exploited

Overview

SonicWall customers are facing a serious security issue as attackers exploit a maximum-severity Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances. This flaw allows unauthorized access to internal resources, potentially leading to data breaches and network compromises. Organizations using these devices need to act quickly to protect their networks, as the vulnerability is currently being targeted in the wild. SonicWall users should ensure their systems are updated and patched to mitigate the risks associated with this exploitation. The urgency of this situation emphasizes the need for businesses to maintain vigilance in securing their devices against emerging threats.

Key Takeaways

Active Exploitation: This vulnerability is being actively exploited by attackers. Immediate action is recommended.
Affected Systems: SonicWall SMA 1000 appliances
Action Required: Users should apply the latest security patches provided by SonicWall for their SMA 1000 appliances.
Timeline: Ongoing since October 2023

Original Article Summary

Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.

Impact

SonicWall SMA 1000 appliances

Exploitation Status

This vulnerability is confirmed to be actively exploited by attackers in real-world attacks. Organizations should prioritize patching or implementing workarounds immediately.

Timeline

Ongoing since October 2023

Remediation

Users should apply the latest security patches provided by SonicWall for their SMA 1000 appliances.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to Exploit, Vulnerability, Critical.

Read Original Article

Related Coverage

TFG London cyberattack disrupts systems at Hobbs and Whistles retailers

BleepingComputer

TFG London has reported a cybersecurity incident affecting its IT systems, particularly those used by its premium fashion brands, including Phase Eight, Hobbs, and Whistles. As a result of this attack, operations at these retailers have been disrupted. The exact nature of the incident hasn't been detailed, but the impact on the brands could lead to significant operational challenges, affecting their ability to serve customers effectively. This incident raises concerns about the security measures in place at fashion retailers and the potential risks they face from cyber threats. It's crucial for companies in this sector to assess their cybersecurity protocols to prevent future incidents.

Oct 13, 2026

Ivanti warns of Connect Secure zero-day exploited in attacks

BleepingComputer

Ivanti has issued a warning regarding a zero-day vulnerability in its Connect Secure (ICS) remote access gateway that is currently being exploited by attackers. This flaw allows unauthorized access to sensitive systems, putting organizations at risk. Ivanti is urging customers to implement patches immediately to protect their systems from potential intrusions. The vulnerability affects users of the Ivanti Connect Secure product, which is widely used for secure remote access. Given the nature of the vulnerability and its active exploitation, it’s crucial for affected organizations to act swiftly to mitigate any potential damage and secure their networks.

Oct 13, 2026

Docker Hub flaw let attackers impersonate users, tamper with images

BleepingComputer

Docker has revealed a serious vulnerability in Docker Hub, identified as CVE-2026-105445. This flaw allowed attackers to impersonate other users by exploiting a personal access token (PAT), which could lead to unauthorized access to container repositories. As a result, attackers could potentially tamper with images stored in these repositories, posing significant risks to users who rely on Docker Hub for their container management. The incident underscores the need for all Docker Hub users to review their security practices, especially regarding the management of access tokens. Docker has urged users to take steps to secure their accounts and monitor their repositories for any unauthorized changes.

Oct 13, 2026

SAP warns of maximum severity OAuth2 SSRF security flaw

BleepingComputer

SAP has issued a warning regarding a severe vulnerability affecting its Cloud SDK for Python, part of a larger security update addressing 20 flaws across various products. This particular vulnerability is classified as maximum severity, indicating that it poses a significant risk to users and their systems. Companies using the affected SDK should act quickly to mitigate potential threats. The update comes as part of SAP's October 2026 security measures, highlighting the ongoing need for vigilance in software security. Users are encouraged to apply the necessary patches to protect their systems from potential exploitation.

Oct 13, 2026

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

The Hacker News

Researchers have identified three vulnerabilities in LG's webOS that can be exploited to give attackers root access to certain LG smart TVs without needing a PIN or any interaction from the owner. This means that anyone on the same local network could potentially take control of these TVs. The affected models include the 32LQ636BPSA and the 27TQ600SW, both running webOS version 7.5.7-25. LG has acknowledged the issue and released a fix to address these vulnerabilities, which was detailed in an advisory published on October 12. This incident raises concerns about the security of smart devices in general, as vulnerabilities like this could allow unauthorized access to personal data and control over the device itself.

Oct 13, 2026

Cyberattack Prompts Ahold Delhaize to Disconnect Systems

SecurityWeek

Ahold Delhaize, the parent company of several grocery brands, has taken some of its systems offline following a cyberattack that posed a security threat to its network. The company acted swiftly to contain the issue, though specific details about the nature of the attack or the systems affected have not been disclosed. This incident raises concerns about the security of retail networks, especially as cyberattacks become more common in the industry. Customers and employees may face disruptions as the company works to restore its systems and ensure the security of its operations. The situation serves as a reminder for businesses to remain vigilant in protecting their networks against potential cyber threats.

Oct 13, 2026