SonicWall SMA1000 CVE-2026-15409 RCE: Patch by July 17

By Editorial Team | July 17, 2026
SonicWall SMA1000 CVE-2026-15409 RCE

SonicWall confirmed that the SonicWall SMA1000 CVE-2026-15409 RCE chain is being actively exploited: an unauthenticated attacker can force a target appliance into arbitrary requests, then pivot to full administrator-level command execution — no valid login required at any point. CISA added both flaws to its Known Exploited Vulnerabilities catalog, with a federal remediation deadline of…

Read More

OPNsense CVE-2026-57155: Root RCE via GeoIP Alias

By Editorial Team | July 7, 2026
OPNsense CVE-2026-57155

OPNsense CVE-2026-57155 (CVSS 9.9) is a path-traversal flaw in the firewall’s GeoIP alias importer that lets a low-privileged user escalate to full root remote code execution. It is the fifth critical or high-severity OPNsense vulnerability disclosed since May 2026, and it matters disproportionately for German Mittelstand IT teams and MSPs because OPNsense’s free, open-source model…

Read More