Search/CVE-2026-83549
● CVE — High

CVE-2026-83549

VendorsonicwallProductsma6210 firmware, sma7210 firmware, sma8200vDiscoveredSep 1, 2026UpdatedSep 21, 2026

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

CVSS v3.1
7.8 HIGH
EPSS
9.89%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
8
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 3, 2026 → Oct 22, 2026
▲ 8.97pp
0.92% → 9.89% over 6 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
16 relationships
Timeline
disclosure → media coverage
Sep 1, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 21, 2026
Sep 2, 2026
securityweek.com reports: SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks
Sep 2, 2026
acn.gov.it reports: SonicWall: rilevato sfruttamento in rete delle CVE-2026-83548 e CVE-2026-83549
Sep 2, 2026
helpnetsecurity.com reports: SonicWall SMA 1000 appliances under attack via zero-day flaws
Sep 2, 2026
theregister.com reports: SonicWall's SMA1000 boxes under active attack again
Sep 7, 2026
research.checkpoint.com reports: 7th September – Threat Intelligence Report
Sep 23, 2026
bleepingcomputer.com reports: InfraTrust report warns network management systems under attack
Oct 7, 2026
bleepingcomputer.com reports: SonicWall warns of max severity SSRF flaw in SMA1000 gateways
Oct 7, 2026
thehackernews.com reports: SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances