What is CVE-2026-83548?
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
Timeline
- 2026-09-01Published to the U.S. National Vulnerability Database (NVD)
- 2026-09-02Added to the CISA Known Exploited Vulnerabilities (KEV) catalog
- 2026-09-02NVD record last updated
- 2026-09-05CISA federal remediation deadline (BOD 22-01)
CISA Known Exploited Vulnerability
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Affected product
SonicWall SMA1000 Appliances
NVD also lists CPE entries for: Sonicwall Sma8200v, Sonicwall Sma6210 Firmware, Sonicwall Sma6210, Sonicwall Sma7210 Firmware, Sonicwall Sma7210
Remediation Steps
- Apply SonicWall security updates for SMA 1000 series VPN appliances as released by vendor
- If patching cannot be completed immediately, isolate affected SMA 1000 appliances from untrusted networks
- Monitor appliance logs for unusual SSRF or authentication bypass attempts
- Enforce network access restrictions to administrative interfaces
- Review and revoke any suspicious user sessions or API tokens created on affected appliances
References
Referenced in our briefings & reports
- Vulnerability Priority Report – Week 5 of August 2026 (August 31 – September 6)
Browse all tracked CVEs in the defend.network CVE database →
🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.