Exploit / PoCcriticalExploited in the wild

SonicWall Fixes Actively Exploited CVE-2025

The Hacker Newsby @TheHackersNewsDec 18, 2025 · 03:59 UTC (Dec 18, 2025)1 min read2

Read at thehackernews.com

Analyze CVE-2025-40602 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-40602 CVE-2025-23006

Tags: cve-2025-40602 cve-2025-23006 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-23006	Unauthenticated Deserialization RCE in SonicWall SMA1000 Appliances	9.8	23%	KEVRansomware	Jan 23, 2025 KEV Jan 24, 2025
CVE-2025-40602	Missing Authorization Flaw in SonicWall SMA1000 Appliance Management Console	6.6	3%	KEV	Dec 18, 2025 KEV Dec 17, 2025

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Dec 17, 2025 Vulnerability / Network Security SonicWall has rolled out fixes to address a security flaw in Secure Mobile Access (SMA) 100 series appliances that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2025-40602 (CVSS score: 6.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.