Exploitation begins within days.

Attackers began targeting a critical SonicWall SMA1000 vulnerability only days after the company publicly disclosed and patched it. The flaw is a pre-authentication server-side request forgery issue that can let remote attackers reach internal functions and perform unauthorized actions on affected devices. Threat intelligence firms observed exploitation attempts against internet-facing systems as early as two days after disclosure and reported activity hitting monitoring sensors and decoy systems. Security researchers warned that successful exploitation could enable attackers to fully compromise vulnerable appliances, prompting calls for immediate patching.

Read more:

https://www.securityweek.com/critical-sonicwall-vulnerability-exploited-days-after-disclosure/