Zero-dayJul 17, 2026
Inc Ransomware Exploits SonicWall SMA Zero-Days
Inc ransomware exploits chained SonicWall SMA zero-days for root-level access.
Vendor Watch
Run SonicWall?
Get an email when a reviewed story names SonicWall, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
Inc ransomware operators are actively exploiting two zero-day vulnerabilities in SonicWall's Secure Mobile Access (SMA) appliances. When chained together, these flaws grant attackers root-level capabilities on vulnerable devices, enabling complete system compromise and lateral movement within target networks.
Indicators of Compromise
- malware — Inc ransomware
Entities
SonicWall Secure Mobile Access (SMA) (product)SonicWall (vendor)Inc ransomware operators (threat_actor)