THREATOPS
THREAT OPS › Threat News › Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

medthehackernewsPublished 2026-09-02

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks.

The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -

CVE-2026-83548 (CVSS score: 10.0) -  A pre-authentication SSRF vulnerability in the Appliance

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html