CISA warns that ransomware groups are actively exploiting two critical SonicWall SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410. Organizations using these VPN appliances are urged to apply the latest security patches immediately to prevent potential compromise.