SonicWall security advisory (AV26-872) – Update 1
CISA added exploited SonicWall SMA1000 flaws CVE-2026-83548 and CVE-2026-83549 to KEV; admins of affected hotfix versions should patch.
Canada's Cyber Centre (advisory AV26-872, Update 1) relays a SonicWall advisory for SMA1000 appliances (6210, 7210, 8200v), stating CVE-2026-83548 and CVE-2026-83549 are being exploited. CISA added both flaws to its Known Exploited Vulnerabilities catalog on September 2, 2026. Affected versions include platform-hotfix 12.4.3-03453 and 12.5.0-02835 and older; administrators should apply available updates.
- SonicWall confirmed CVE-2026-83548 and CVE-2026-83549 are being exploited against SMA1000 appliances.
- CISA added both flaws to KEV on September 2, 2026.
- Affected versions include platform-hotfix 12.4.3-03453 and 12.5.0-02835 and older; patch promptly.
- Vendors
- SonicWall
- Products
- SonicWall SMA1000
- Organizations
- CISACanadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-83548+1 related CVE | Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface | 10.0 group max | 8% | KEVPoC ×3 | KEV |
From the original article
1 min read at cyber.gc.ca
Serial Number: AV26-872 Date: September 2, 2026 As of September 1, 2026, SonicWall is affected by a vulnerability in the following product: SMA1000 - 6210, 7210, 8200v 12. 4. 3-03453 (platform-hotfix) and older versions 12.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.