Cybersecurity Advisories - NCSA - الوكالة الوطنية للأمن السيبراني

SonicWall has released a security patch for two exploited vulnerabilities affecting SonicWall SMA1000 Series appliances that could allow arbitrary OS command execution and gain access to sensitive functionality.

SonicWall SMA1000 is affected by two critical and high-severity vulnerabilities that could allow unauthenticated attackers to gain access to sensitive functionality and a remote authenticated attacker as administrator to execute arbitrary OS commands. The vulnerabilities are: 1. CVE-2026-83548, is a critical Pre-authentication SSRF vulnerability with CVSS score of 10 out of 10, caused by unintended alternate access path. when exploited by remote unauthenticated attacker unauthorized access to sensitive functionality is granted and preform unauthorized operations. 2. CVE-2026-83549 is a post-authentication improper neutralization of special elements used in OS commands vulnerability CVSS score of 7.8 out of 10. When exploited it enables a remote authenticated attacker to execute arbitrary OS commands.

SonicWall has released security updates that address the vulnerabilities described in this Risk Directive. Organizations are advised to keep software up-to-date with latest security patches to mitigate the risk associated with vulnerabilities.

We use cookies to enhance your experience on our website. Click 'Accept All' to consent.