ctrlINT What the industry said about every indicator, with the quote

CVE-2026-83548Vulnerability

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 11 independent sources · first reported by Sophos X-Ops · last reported

Last reported 11 days ago

CISA KEVAdded 2 Sep 2026
Fix due 5 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS8.0%
higher than 94% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

12 reports, newest first · the exact sentence from each

  1. “CVE-2026-83548”

    Recorded FutureVendor
    September 2026 CVE Landscape

  2. “In early September, SonicWall patched two zero-days (CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 (CVSS 7.8)) in SMA 1000 VPNs, including a CVSS 10 pre-auth SSRF flaw, after confirming active exploitation.”

    Security AffairsNews
    SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances

  3. “SonicWall disclosed CVE-2026-15409 and CVE-2026-15410 on July 14, and CVE-2026-83548 and CVE-2026-83549 on September 1.”

    The Hacker NewsNews
    SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

  4. “In 2026, two pre-authentication server-side request forgery flaws (CVE-2026-15409, CVE-2026-83548) in SonicWall’s SMA 1000 appliances have been leveraged as zero-days.”

    Help Net SecurityNews
    SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

  5. “On September 1, SonicWall reported that threat actors are actively exploiting a chained set of SonicWall SMA1000 zero-day flaws, CVE-2026-83548 and CVE-2026-83549, to run commands on exposed remote access appliances.”

    CERT-EUGovernment
    Cyber Brief 26-10 - September 2026

  6. “CVE-2026-83548 is an SSRF used to bypass auth.”

    Rapid7Vendor
    Metasploit Wrap Up: This One Goes to Sixteen!

  7. “SonicWall has addressed CVE-2026-83548 and CVE-2026-83549, critical vulnerabilities affecting SMA 1000 remote access gateways.”

    Check Point ResearchVendor
    7th September – Threat Intelligence Report

  8. “The two zero-days allow attackers to bypass authentication (CVE-2026-83548) and run malicious commands on the devices (CVE-2026-83549).”

    Risky Business NewsNews
    Risky Bulletin: Russia tells data centers to deploy drone defenses

  9. “Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild”

    Rapid7Vendor
    Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

  10. “The more critical of the two zero days is CVE-2026-83548: a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface.”

    Infosecurity MagazineNews
    Hackers Chain Two New SonicWall Zero-Day Vulnerabilities

  11. “La vulnérabilité critique CVE-2026-83548 permet une falsification de requêtes côté serveur (SSRF) de la part d'un attaquant non authentifié.”

    CERT-FRGovernment
    Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)

  12. “SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation”

    Sophos X-OpsVendor
    SonicWall 83548 83549

Indicators reported together

named in the same reports

Also named with it: CVE-2026-83549, CVE-2026-82329, CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-102258, CVE-2026-15409, CVE-2026-87491, CVE-2026-48710, CVE-2026-81578, CVE-2026-82078, CVE-2026-20079, CVE-2026-65660, CVE-2026-19490, CVE-2026-32475, CVE-2026-9586, CVE-2026-49869, CVE-2026-59822, CVE-2026-60004, CVE-2026-15410

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-83548 here?
No account needed. We do not store your IP address.