Critical severity10.0CISA KEVNVD Advisory· Published Sep 1, 2026· Updated Sep 3, 2026
CVE-2026-83548
CVE-2026-83548
Description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
19- SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 AppliancesThe Hacker News · Oct 7, 2026
- SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10Cyber Security News · Oct 7, 2026
- SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)Help Net Security · Oct 7, 2026
- Metasploit Wrap Up: This One Goes to Sixteen!Rapid7 Blog · Sep 11, 2026
- 7th September – Threat Intelligence ReportCheck Point Research · Sep 7, 2026
- Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecastHelp Net Security · Sep 6, 2026
- Attackers exploit zero-days in consistently besieged SonicWall productCyberScoop · Sep 3, 2026
- CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in AttacksCyber Security News · Sep 3, 2026
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersThe Hacker News · Sep 3, 2026
- SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCEDark Reading · Sep 2, 2026
- Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildRapid7 Blog · Sep 2, 2026
- SonicWall's SMA1000 boxes under active attack againThe Register Security · Sep 2, 2026
- Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainThe Hacker News · Sep 2, 2026
- SonicWall SMA 1000 appliances under attack via zero-day flawsHelp Net Security · Sep 2, 2026
- Hackers Chain Two New SonicWall Zero-Day VulnerabilitiesInfosecurity Magazine · Sep 2, 2026
- Critical SonicWall Remote Code Execution Vulnerabilities Actively Exploited in AttacksCyber Security News · Sep 2, 2026
- SonicWall Warns of Two SMA1000 Zero-Days Exploited in AttacksSecurityWeek · Sep 2, 2026
- SonicWall: 2 Actively-Exploited Flaws Added to CISA KEVVypr Intelligence · Sep 2, 2026
- CISA Adds Seven Known Exploited Vulnerabilities to CatalogCISA Alerts