SonicWall SMA1000

Mentions · 7d0
Mentions · 30d0
All mentions7
First seenAug 14, 2026
Last mentionedSep 11, 2026

Timeline

7 articles · newest first

Metasploit Wrap Up: This One Goes to Sixteen!

Metasploit adds 16 modules including 10 exploits, five covering CISA KEV vulnerabilities in Cisco, SonicWall, PaperCut, JetBrains and Langflow.

Rapid7 BlogSep 11, 13:35 UTC · Sep 11, 2026ToolsExploitedCVE-2025-66516 CVE-2025-54988 CVE-2026-20929+810 · 7 reads

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

Hunt.io links a UK council attack to mass exploitation of SonicWall SMA1000 flaw CVE-2026-15409 (CVSS 10.0), enabling credential and Active Directory theft.

Security AffairsSep 11, 07:11 UTC · Sep 11, 2026Exploit / PoCExploitedCVE-2026-154095 · 2 reads

CISA Warns of SonicWall SMA1000 Vulnerabilities Active Exploitation (CVE-2026-83548 & CVE-2026-83549)

CISA added two actively exploited SonicWall SMA1000 flaws to KEV: pre-auth SSRF CVE-2026-83548 (CVSS 10) and post-auth RCE CVE-2026-83549; patch by September 5.

Qualys ThreatPROTECTSep 3, 13:09 UTC · Sep 3, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-835492 · 1 read

SonicWall security advisory (AV26-872) – Update 1

CISA added exploited SonicWall SMA1000 flaws CVE-2026-83548 and CVE-2026-83549 to KEV; admins of affected hotfix versions should patch.

Canadian Centre for Cyber SecuritySep 2, 18:44 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-835491 · 1 read

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

SonicWall SMA1000 appliances face active exploitation of chained CVE-2026-83548 and CVE-2026-83549 enabling unauthenticated RCE; hotfixes released.

Rapid7 BlogSep 2, 16:58 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-83548 CVE-2026-835491 · 1 read

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA added seven actively exploited vulnerabilities to its KEV catalog, including SonicWall SMA1000 SSRF and command injection flaws.

CISA AdvisoriesSep 2, 12:00 UTC · Sep 2, 2026Exploit / PoCExploitedCVE-2026-9586 CVE-2026-48710 CVE-2026-49869+41

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Metasploit 6.5 ships 13 new modules including RCEs for SonicWall SMA1000, Ghost CMS, Joomla JCE and Langflow, plus a Linux kernel LPE.

Rapid7 BlogAug 14, 21:27 UTC · Aug 14, 2026ToolsCVE-2026-463002 · 2 reads

Related CVEs

by mentions

CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-154097%10.0
Unauthenticated SSRF in SonicWall SMA1000 Appliances
published Jul 14, 2026SonicWall SMA1000 Appliances (SMA 6210 firmware)KEVRansomwarePoC
CVE-2026-8232914%9.8
Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
published Aug 28, 2026jfrog artifactoryKEVPoC ×2
CVE-2026-958619%9.3
Unauthenticated SQL Injection RCE in Sangoma Switchvox SMB Edition
published Jul 17, 2026Sangoma Switchvox SMB EditionKEVPoC
CVE-2026-59822<1%8.8
Unauthenticated MCP Endpoint Authentication Bypass in BerriAI LiteLLM
published Jul 8, 2026BerriAI LiteLLMKEV
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2026-4871070%6.5
HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
published May 26, 2026Kludex (Encode) StarletteKEVPoC ×3
CVE-2026-2374468%9.8
Unauthenticated RCE in MCPJam Inspector via crafted HTTP requests
published Jan 16, 2026mcpjam inspectorPoC ×3
CVE-2025-5498815%8.4
Critical XXE in Apache Tika (tika-parser-pdf-module) in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML…
published Aug 20, 2025apache tika

Appears with

SonicWallvendor · 7
CISAorganization · 5
SonicWallorganization · 3
Rapid7vendor · 3
Rapid7organization · 2
CISAvendor · 2
Langflowproduct · 2
Sangomavendor · 1
Sangoma Switchvoxproduct · 1
PaperCut NG/MFproduct · 1
JFrogvendor · 1
BerriAIvendor · 1
JetBrains TeamCityproduct · 1
Metasploitvendor · 1
JFrogorganization · 1
Ray Dashboardproduct · 1

Entities are extracted by the model from each article. First seen Aug 14, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.