Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

The feed highlights multiple high-impact active threats and supply-chain incidents: SonicWall SMA 1000 appliances are under active exploitation of two zero-days (notably CVE-2026-15409, an SSRF leading to possible arbitrary command execution). Microsoft released a record 622 fixes including two zero-days under active attack. SAP patched a critical NetWeaver ABAP out‑of‑bounds write (CVE-2026-44747, CVSS 9.9). Joomla iCagenda and Balbooa Forms flaws (including CVE-2026-48939, CVSS 10.0) are reported as exploited zero-days. Other notable items: RabbitMQ access-control flaws that can leak OAuth/跨