SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

Summary

A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the activity under the moniker UTA0533. The discovery was made following an incident response investigation earlier this

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.