SB2026090221 - Two vulnerabilities in SonicWall SMA1000 series appliances
Published: September 2, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 vulnerabilities.
1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2026-83548) Exploited
CWE-ID: CWE-918 - Server-Side Request Forgery (SSRF)
CVSSv4: 10 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]
The vulnerability allows a remote attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.
The vulnerability exists due to server-side request forgery in the SMA1000 Appliance Work Place interface when handling requests through an unintended alternate access path. A remote attacker can send crafted requests to gain unauthorized access to sensitive functionality and perform unauthorized operations.
The issue is pre-authentication and involves an unintended forward-proxy behavior.
Note, the vulnerability is being actively exploited in the wild.
2) OS Command Injection (CVE-ID: CVE-2026-83549) Exploited
CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to execute arbitrary OS commands.
The vulnerability exists due to command injection in the SMA1000 Appliance Management Console (AMC) when processing input in specific conditions. A local user can send crafted input to execute arbitrary OS commands.
Exploitation is post-authentication and requires specific conditions.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.