CVE-2026-83548

Published on September 1, 2026

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Early warning: exploitation observed

Exploitation observed since Sep 1, 2026
Not yet in the official CISA catalogue
Attacked 1 day before the vulnerability was made public

Source: VulnCheck KEV · Sep 1, 2026 Sep 1, 2026

Weakness type (CWE)CWE-441, CWE-918

SonicWall SMA1000 sotto attacco: due zero-day consentono SSRF e comandi sul sistema

Vulnerabilities

SonicWall SMA1000 Under Attack: Two Zero-Days Enable SSRF and System Command Execution

Two SonicWall SMA1000 zero-days (CVE-2026-83548, CVE-2026-83549) are actively exploited enabling SSRF and OS command execution. Learn affected models, hotfixes and CISA KEV guidance.

Sep 2, 20265 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Early warning: exploitation observed

Related articles

SonicWall SMA1000 Under Attack: Two Zero-Days Enable SSRF and System Command Execution