Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-83549

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

7.8
CVSS 3.1
1
story
SEP 2
added to KEV
Severity
7.8 High · vendor score
Vendor
SonicWall
Product
SMA1000 Appliances
Published
Sep 1, 2026
Added to KEV
Sep 2, 2026
KEV deadline
Sep 5, 2026
Ransomware use
Unknown
Weakness
CWE-78

What it is

SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesSonicWall Warns of Exploited SSL VPN Flaw (CVE-2026-19868)SonicWall warns that attackers are exploiting a high-severity SonicOS SSL VPN authentication bypass flaw (CVE-2026-19868) that can circumvent SAML-enforced MFA.LINDSEY O'DONNELL-WELCH · 1 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorypsirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016