AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SonicWallCVE-2026-83548

SonicWall SMA1000: server-side request forgery

SonicWall

CVE-2026-83548 · Published Sep 1, 2026 · updated Sep 3, 2026

Critical10.0
No fix yet
SonicWall advisory

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Affected versions

PackageAffectedFixed in
SMA1000
Product
<= 12.4.3-03453 (platform-hotfix) and older versionsNo fix yet
<= 12.5.0-02835 (platform-hotfix) and older versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-441, CWE-918

More SonicWall advisories

All SonicWall
Critical 9.1Sep 4SonicWall Network Security Manager (NSM): path traversalCVE-2026-81939no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): missing authorizationCVE-2026-78328no fix yetCritical 9.1Sep 4SonicWall Network Security Manager (NSM): command injectionCVE-2026-78327no fix yetHigh 7.8Sep 1SonicWall SMA1000: command injectionCVE-2026-83549no fix yetHigh 8.8Aug 25SonicWall NetExtender: path traversalCVE-2026-66152no fix yetHigh 7.0Aug 25SonicWall NetExtender: link followingCVE-2026-66153no fix yet