High severity7.8CISA KEVNVD Advisory· Published Sep 1, 2026· Updated Sep 21, 2026
CVE-2026-83549
CVE-2026-83549
Description
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
2- psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
18- SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 AppliancesThe Hacker News · Oct 7, 2026
- SonicWall Patches 4 SMA1000 Flaws, Including Critical Pre-Auth SSRF Rated CVSS 10Cyber Security News · Oct 7, 2026
- Metasploit Wrap Up: This One Goes to Sixteen!Rapid7 Blog · Sep 11, 2026
- 7th September – Threat Intelligence ReportCheck Point Research · Sep 7, 2026
- Week in review: Claude accounts compromised through infostealer, Patch Tuesday forecastHelp Net Security · Sep 6, 2026
- Attackers exploit zero-days in consistently besieged SonicWall productCyberScoop · Sep 3, 2026
- CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in AttacksCyber Security News · Sep 3, 2026
- CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersThe Hacker News · Sep 3, 2026
- SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCEDark Reading · Sep 2, 2026
- Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildRapid7 Blog · Sep 2, 2026
- SonicWall's SMA1000 boxes under active attack againThe Register Security · Sep 2, 2026
- Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack ChainThe Hacker News · Sep 2, 2026
- SonicWall SMA 1000 appliances under attack via zero-day flawsHelp Net Security · Sep 2, 2026
- Hackers Chain Two New SonicWall Zero-Day VulnerabilitiesInfosecurity Magazine · Sep 2, 2026
- Critical SonicWall Remote Code Execution Vulnerabilities Actively Exploited in AttacksCyber Security News · Sep 2, 2026
- SonicWall Warns of Two SMA1000 Zero-Days Exploited in AttacksSecurityWeek · Sep 2, 2026
- SonicWall: 2 Actively-Exploited Flaws Added to CISA KEVVypr Intelligence · Sep 2, 2026
- CISA Adds Seven Known Exploited Vulnerabilities to CatalogCISA Alerts