CVE-2026-83548

CRITICAL 10.0

⚠️ CISA KEV

CVSS Score

10.0

EPSS Score

0.3%

EPSS Percentile

18th

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

CWE	CWE-918 CWE-441
Vendor	sonicwall
Product	sma1000
Published	Sep 1, 2026
Last Updated	Sep 3, 2026

⚠️ Actively Exploited — Act Now

Get instant alerts for sonicwall sma1000

This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-83548.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

SonicWall / SMA1000

12.4.3-03453 (platform-hotfix) and older versions 12.5.0-02835 (platform-hotfix) and older versions

References

NVD ↗ CVE.org ↗ EPSS Data ↗

psirt.global.sonicwall.com: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548

Credits

Adam Babis of SonicWall PSIRT