Summary
generated automatically from NVD dataCVE-2026-83548 is a pre-authentication server-side request forgery (SSRF) flaw in the Work Place interface of the SonicWall SMA1000 appliance, caused by an unintended alternate access path (CWE-441). A remote unauthenticated attacker could use it to reach sensitive functionality and perform unauthorized operations. It affects the sma8200v, sma6210 and sma7210 firmware, with NVD bounds of 12.4.3-03526 and 12.5.0-02952. The flaw is rated CVSS 10.0 (CRITICAL) and is listed in the CISA KEV catalog as actively exploited.
NVD description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2026-09-02. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2026-09-05
EPSS · FIRST.org
8.0%probability of exploitation in the next 30 days
Higher than 94% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-16, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 1 sept. 2026
- Updated
- 3 sept. 2026
- Status
- Analyzed
- Source
- PSIRT@sonicwall.com
Affected products
Weaknesses (CWE)
References (2)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548US Government Resource
Similar CVEs
Other vulnerabilities of type CWE-441
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.