Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
SonicWall SMA1000 Flaws Actively Exploited for SSRF and Remote Code Execution
Excerpt
SonicWall has issued an urgent security advisory (SNWLID-2026-0008) confirming active, in-the-wild exploitation of two critical vulnerabilities affecting its SMA1000 Series appliances . The flaws, tracked as CVE-2026-15409 and CVE-2026-15410, allow attackers to chain an unauthenticated SSRF bug with a post-authentication code injection flaw to achieve full remote code execution on affected devices. CVE-2026-15409 is a maximum-severity Server-Side Request Forgery (SSRF)…
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-15410 | High | Score 75/100 | First seen |
| CVE | CVE-2026-15409 | High | Score 78/100 | First seen |
IOC Relationship Graph
Building graph…