NewsThe Hacker News2026-09-02 10:53 UTCPublic Sector Finance SME

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks. The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below - CVE-2026-83548 (CVSS score: 10.0) - A pre-authentication SSRF vulnerability in the Appliance

CVE-2026-83548SonicWall SMA1000 Appliances — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
CVE-2026-83548sonicwall sma6210_firmware: Server-Side-Request-Forgery (SSRF)
CVE-2026-83548SonicWall SMA: Mehrere Schwachstellen

Other advisories

CVE-2026-102257high
SonicWall SMA1000: Mehrere Schwachstellen
CVE-2026-102258none
SonicWall SMA: Cross-Site-Scripting (XSS)
CVE-2026-102257none
SonicWall SMA: Verzeichnisaufloesung (Path Traversal)
CVE-2026-102256none
SonicWall SMA: Betriebssystem-Befehlsinjektion
CVE-2026-102255none
SonicWall SMA: Server-Side-Request-Forgery (SSRF)
CVE-2026-102258none
SonicWall SMA: Cross-Site-Scripting (XSS)
CVE-2026-102257none
SonicWall SMA: Verzeichnisaufloesung (Path Traversal)
CVE-2026-102256none
SonicWall SMA: Betriebssystem-Befehlsinjektion

Other news entries

Newsbleepingcomputer2026-10-09
Max severity SonicWall SMA1000 flaw now exploited in attacks
Newssecurityweek2026-10-08
SonicWall and Splunk Patch Critical Vulnerabilities
Vulnerabilitybsi-cert-bund-wid2026-10-08
SonicWall SMA1000: Mehrere Schwachstellen
Newscsoonline2026-10-08
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
Newsthehackernews2026-10-07
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
Newsbleepingcomputer2026-10-07
SonicWall warns of max severity SSRF flaw in SMA1000 gateways
Vulnerabilitybsi-cert-bund-wid2026-10-07
SonicWall SMA1000: Mehrere Schwachstellen
Newsncsc-nl2026-10-07
NCSC-2026-0403 [1.00] [M/H] Kwetsbaarheden verholpen in SonicWall SMA1000 Appliance

Source: https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html

Linked advisories

More on SonicWall