THREAT OPS › CVEs › CVE-2026-83549
CVE-2026-83549 — SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
Vulnerability details
- Affected productsSMA1000 Appliances
- KEV remediation due2026-09-05
Related reporting
- Metasploit Wrap Up: This One Goes to Sixteen!rapid7
- 7th September – Threat Intelligence Reportcheckpoint_research
- SonicWall CVE-2026-83548 Leads to CISA Alertsocradar_blog
- Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wildrapid7
- CISA Adds Seven Known Exploited Vulnerabilities to Catalogcisa_advisories
- [CISA KEV] CVE-2026-83549 — SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances OS Command Injection Vulnerabilitycisa_kev
- SonicWall security advisory (AV26-872)cccs_ca