SonicWall SMA 1000 hit by five zero-days since late 2025; active exploitation ongoing

SonicWall's SMA 1000 series has been repeatedly targeted, with five actively exploited zero-day vulnerabilities since late 2025, indicating a sustained campaign against this product line. The latest attacks underscore a persistent threat pattern, likely state-sponsored or highly organized, targeting perimeter devices. This matters as SMA 1000 appliances are widely used in enterprise and government networks, and continued exploitation poses significant supply-chain and network-security risks.