Detections
Analytics

CVE-2026-83548

critical

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016

https://www.bleepingcomputer.com/news/security/max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks/

https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/

https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-max-severity-ssrf-flaw-in-sma1000-gateways/

https://thehackernews.com/2026/10/sonicwall-patches-cvss-100-pre.html

https://securityaffairs.com/200569/security/sonicwall-fixes-max-severity-pre-auth-flaw-in-sma1000-appliances.html

https://www.bleepingcomputer.com/news/security/infratrust-report-warns-network-management-systems-under-attack/

https://www.hipaajournal.com/sonicwall-actively-exploited-vulnerabilities-sma1000-appliances-sep-26/

https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html

https://cyberscoop.com/sonicwall-sma1000-zero-days-actively-exploited/

https://www.theregister.com/security/2026/09/02/sonicwalls-sma1000-boxes-under-active-attack-again/5293969

https://www.sophos.com/en-us/blog/sonicwall-83548-83549

https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/

https://www.infosecurity-magazine.com/news/hackers-chain-sonicwall-zeroday/

https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/

https://www.darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce

https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog

https://www.bleepingcomputer.com/news/security/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws/

https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html

https://securityaffairs.com/198303/security/sonicwall-patches-two-new-actively-exploited-zero-days-in-sma-1000-vpns.html

https://github.com/xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-69704

Details

Source: Mitre, NVD

Published: 2026-09-01

Updated: 2026-09-03

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 10

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.08043

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability of Interest