CVE · Exploited · On CISA KEV

CVE-2026-83548

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

10.0: CVSS 3.1
1: story
SEP 2: added to KEV

Severity: 10.0 Critical · vendor score
Vendor: SonicWall
Product: SMA1000 Appliances
Published: Sep 1, 2026
Added to KEV: Sep 2, 2026
KEV deadline: Sep 5, 2026
Ransomware use: Unknown
Weakness: CWE-441, CWE-918

What it is

SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑

NOV 7
VulnerabilitiesSonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)SonicWall warns that attackers are exploiting a high-severity SonicOS SSL VPN authentication bypass flaw (CVE-2026-19868) that can circumvent SAML-enforced MFA.LINDSEY O'DONNELL-WELCH · 1 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record RegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016