by Kastro
Paper/Archive/CVE-2026-83548

CVE-2026-83548

SonicWall SMA1000 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

KEV · due 5 SepEPSS 8%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
99
CVSS 10.0 (ADP)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 94.8.948 × 2019.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Affected

ProductAffectedFixed inSource
SMA100012.4.3-03453 (platform-hotfix) and older versions–CNA
SMA100012.5.0-02835 (platform-hotfix) and older versions–CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548kevcisa.gov/known-exploited-vulnerabilities-catalog