Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Critical SonicWall SSRF Zero-Day Opens WebSocket Tunnel to Internal Services
Malware Families
Excerpt
SonicWall published a security advisory on July 14, 2026, addressing two actively exploited vulnerabilities affecting its SMA1000 Series remote access appliances . The flaws include a maximum-severity server-side request forgery (SSRF) vulnerability (CVE-2026-15409, CVSS 10.0) and a high-severity code injection vulnerability (CVE-2026-15410). SonicWall urges customers to apply platform hotfix releases immediately. CVE-2026-15409 allows an unauthenticated attacker to open a…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-15410 | High | Score 75/100 | First seen |
| CVE | CVE-2026-15409 | High | Score 78/100 | First seen |
IOC Relationship Graph
Building graph…