Sonicwall – TheCyberThrone

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

CVE-2026-102255: Critical Pre-Auth SSRF Vulnerability in SonicWall SMA1000

A new critical vulnerability in SonicWall SMA1000 appliances deserves immediate attention from organizations using the platform as an internet-facing remote-access gateway. Tracked as CVE-2026-102255, the vulnerability is a pre-authentication Server-Side…

PravinKarthik October 8, 2026

CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws

CISA Adds 7 Vulnerabilities to KEV: A New Wave of Actively Exploited Flaws

On September 2, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added seven vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, marking another reminder that the threat landscape is…

PravinKarthik September 3, 2026

SonicWall SSLVPN Vulnerability CVE-2025-40601

SonicWall SSLVPN Vulnerability CVE-2025-40601

A critical vulnerability was discovered affecting SonicWall firewalls’ SSLVPN service, identified as CVE-2025-40601. This stack-based buffer overflow flaw allows unauthenticated remote attackers to crash vulnerable devices, potentially causing severe denial-of-service…

PravinKarthik November 23, 2025

Massive SonicWall Cloud Backup Breach Exposes Customer Networks

Massive SonicWall Cloud Backup Breach Exposes Customer Networks

In early October 2025, SonicWall confirmed a major security incident that now stands as one of the most significant configuration leaks in recent memory. An unauthorized party accessed firewall configuration…

PravinKarthik October 14, 2025

MySonicWall Breach Exposes Firewall Backup Data

MySonicWall Breach Exposes Firewall Backup Data

Introduction On September 16, 2025, SonicWall announced a breach impacting its MySonicWall cloud service. Threat actors managed to access cloud-based firewall configuration backups for a subset of SonicWall customers, raising…

PravinKarthik September 18, 2025

CVE-2025-32818 impacts SonicOS SSLVPN

CVE-2025-32818 impacts SonicOS SSLVPN

CVE-2025-32818 is a critical vulnerability affecting the SonicOS SSLVPN Virtual Office interface. This flaw allows remote, unauthenticated attackers to exploit a Null Pointer Dereference, causing the firewall to crash and…

PravinKarthik April 28, 2025

SonicWall impacted by CVE-2025-23009 and CVE-2025-23010

SonicWall impacted by CVE-2025-23009 and CVE-2025-23010

Two vulnerabilities, CVE-2025-23009 and CVE-2025-23010, affecting the SonicWall NetExtender Windows Client, have been disclosed. These vulnerabilities pose medium risks but highlight the importance of proactive patching and strong security controls…

PravinKarthik April 11, 2025

CISA Adds Palo Alto and SonicWall Vulnerabilities to KEV

CISA Adds Palo Alto and SonicWall Vulnerabilities to KEV

The Cybersecurity and Infrastructure Security Agency (CISA) has recently identified and added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. These vulnerabilities, affecting Palo Alto Networks' PAN-OS and…

PravinKarthik February 19, 2025