CVE-2026-83549
CVSS Score
7.8
EPSS Score
8.5%
EPSS Percentile
95th
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
| CWE | CWE-78 |
| Vendor | sonicwall |
| Product | sma1000 |
| Published | Sep 1, 2026 |
| Last Updated | Sep 21, 2026 |
⚠️ Actively Exploited — Act Now
Get instant alerts for sonicwall sma1000
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-83549.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SonicWall / SMA1000
12.4.3-03453 (platform-hotfix) and older versions 12.5.0-02835 (platform-hotfix) and older versions