CVSS 3.1
10.0 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HCVE-2026-83548
Critical (10.0) in SonicWall SMA1000 Appliances. In CISA KEV since 2026-09-02. EPSS 8.0% chance of exploitation in the next 30 days.
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
Severity
- EPSS
- 8.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-09-02, due 2026-09-05
- CWEs
- CWE-441, CWE-918
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sonicwall:sma6210_firmware
- sonicwall:sma7210_firmware
- sonicwall:sma8200v