Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-83548: SonicWall SMA1000 appliances can be tricked into unauthorized actions

CVE-2026-83548 · published 2 months ago · actively exploited

Summary

The SonicWall SMA1000 series, including SMA8200v, SMA6210 firmware, SMA7210 firmware and SMA1000 models, can be fooled into making requests on behalf of an attacker. This could let an unauthenticated remote user reach sensitive functions and perform actions they shouldn’t. Apply the latest firmware updates or patches from SonicWall as soon as possible to close the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sonicwall	sma1000 appliances	All versions
sonicwall	sma8200v	< 12.4.3-03526 >= 12.5.0, < 12.5.0-02952 `cpe:2.3:a:sonicwall:sma8200v::::::::`
sonicwall	sma6210_firmware	< 12.4.3-03526 >= 12.5.0, < 12.5.0-02952 `cpe:2.3:o:sonicwall:sma6210_firmware::::::::`
sonicwall	sma7210_firmware	< 12.4.3-03526 >= 12.5.0, < 12.5.0-02952 `cpe:2.3:o:sonicwall:sma7210_firmware::::::::`
sonicwall	sma1000	12.4.3-03453 (platform-hotfix) and older versions

Original advisory text

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-... US Government Resource

Fix within

Internet-facing 3 days

and check for signs of compromise

Internal 3 days

and check for signs of compromise

Known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

10.0 Critical

Exploitation

Known exploited

Listed in the CISA KEV catalogue - exploitation confirmed in the wild.

8% chance of attack within 30 days

Type

CWE-918Server-Side Request Forgery (SSRF)

CWE-441Unintended Proxy or Intermediary ('Confused Deputy')

Timeline

Published1 Sep 2026

Updated22 Oct 2026

First seen2 Sep 2026

Sources

CVE-2026-83548 · NVD

CVE-2026-83548 · MITRE

CVE-2026-83548 · CISA KEV

Track software like this

Free during beta