Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-02 10:53 UTC
  • Importiert: 2026-09-08 16:00 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: aa318c6d08affe695370935ae69e9362f7468dbadc7e55650b53851df90961af

Inhalt

SonicWall has released security updates to address two security flaws impacting its Secure Mobile Access (SMA) 1000 series VPN appliances that have been exploited in zero-day attacks.

The vulnerabilities, discovered internally by SonicWall's William Perry and Adam Babis, are listed below -

CVE-2026-83548 (CVSS score: 10.0) -  A pre-authentication SSRF vulnerability in the Appliance

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-83548

CRITICAL

10

CRITICAL

10

0.08043

0.94746

2026-09-01

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews