The high-severity SSLVPN authentication bypass flaw affecting SonicWall firewalls running vulnerable SonicOS versions is actively being exploited in-the-wild.

At the beginning of January, Sonicwall released updates to close a zero-day vulnerability in Sonicwall's SSL VPN and SSH management. The manufacturer warned of possible misuse by attackers.

SonicWall has confirmed that an SMA 1000 zero-day tracked as CVE-2025-23006 has been exploited in the wild. SonicWall has confirmed that a recently discovered vulnerability affecting its Secure Mobile ...

Cybersecurity company SonicWall says hackers are exploiting a newly discovered vulnerability in one of its enterprise products to break into its customers’ corporate networks. SonicWall said in ...

There is a serious security vulnerability in the management consoles of the SonicWall appliance SMA1000. Via an insecure deserialization (CVE-2025-23006, critical rating, CVSS value 9.8/10 ...