SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
2026-10-08T02:51:37Z•8b0e332a2b344bf78a3af86df1ffca1eb93cfbfb896752211288bc2d3f08685c
CVE-2026-102255CVE-2026-61500CVE-2026-86360CVE-2026-96940AI securityClickFixClingSTUNDell DSUExchange ServerFortiBleedFortinet FortiGateLinux backdoorLunexStealerRejetto HFSSonicWall SMA1000active exploitationcredential theftcritical vulnerabilitydata breachpre-auth SSRFvulnerability management
What happened
Security news roundup covering critical vulnerabilities, active exploitation, malware campaigns, credential theft, unauthorized AI-agent activity, and security-related data exposure. Notable items include a CVSS 10 pre-authentication SSRF in SonicWall SMA1000, a widespread FortiGate credential-harvesting campaign, ClickFix delivery of LunexStealer, emergency Exchange Server and Dell DSU fixes, and in-the-wild exploitation of a critical Rejetto HFS authentication-bypass/RCE flaw.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8b0e332a2b344bf78a3af86df1ffca1eb93cfbfb896752211288bc2d3f08685c
- Enrichment time
- 2026-10-08T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.