SonicWall SMA 1000 Series Affected by Critical Vulnerabilities with Evidence of Exploitation
SonicWall has disclosed two serious vulnerabilities in its SMA 1000 series remote access appliances. The issues, tracked as CVE-2026-83548 and CVE-2026-83549, affect the SMA 6210, SMA 7210, and SMA 8200v models. CVE-2026-83548 is a server-side request forgery flaw in the WorkPlace interface that permits unauthenticated remote access to otherwise restricted functions. CVE-2026-83549 is an OS command injection vulnerability in the Appliance Management Console that can lead to remote command execution after authentication under certain conditions. Both vulnerabilities received high CVSS scores, with one reaching the maximum of 10.0. The vendor published the advisory on September 1, 2026, and confirmed cases where the flaws appear to have been exploited in the wild.
Security NEXTSep 2, 2026Translated from Japanese