KNUCKLEBALL

Mentions · 7d0
Mentions · 30d1
All mentions3
First seenSep 2, 2026
Last mentioned18d ago

Timeline

3 articles · newest first

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Attackers made 135 attempts to exploit critical pre-auth SSRF CVE-2026-102255 in SonicWall SMA 1000 days after patching.

The Hacker NewsOct 12, 10:36 UTC · 18d agoExploit / PoCExploitedCVE-2026-102255 CVE-2026-15409 CVE-2026-154106 · 2 reads

SonicWall Patches Two New Actively Exploited Zero

SonicWall patches two actively exploited SMA 1000 VPN zero-days: CVSS 10.0 pre-auth SSRF CVE-2026-83548 and post-auth command injection CVE-2026-83549, chained for RCE.

Security AffairsSep 2, 14:22 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-83549 CVE-2026-15409+15 · 1 read

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall patches two actively exploited zero-days (CVE-2026-83548, CVE-2026-83549) in SMA 1000 VPN appliances, likely chained for code execution.

The Hacker NewsSep 2, 10:53 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-83549 CVE-2026-15409+13 · 1 read

Related CVEs

by mentions

CVE-2026-154097%10.0
Unauthenticated SSRF in SonicWall SMA1000 Appliances
published Jul 14, 2026SonicWall SMA1000 Appliances (SMA 6210 firmware)KEVRansomwarePoC
CVE-2026-1541012%7.2
Authenticated OS Command Injection in SonicWall SMA 1000 Appliance Management Console
published Jul 14, 2026SonicWall SMA1000 Appliance Management Console (AMC) — SMA 6210KEVRansomware
CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-102255<1%10.0
Pre-auth SSRF in SonicWall SMA1000 Work Place interface
published 23d agoSonicWall SMA1000 Appliance (Work Place interface)PoC ×2

Appears with

UTA0533threat actor · 3
SonicWallvendor · 3
SonicWallorganization · 2
SMA 1000product · 2
SonicWall SMA 1000product · 1
Rapid7organization · 1
KNUCKLEBALLproduct · 1
Volexityorganization · 1
Defused Cyberorganization · 1
Previdianorganization · 1

Entities are extracted by the model from each article. First seen Sep 2, 2026, last mentioned 18d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.