CVE-2026-83548

● KEV CRITICAL

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit ...

Affects 0 products across 1 vendor.

CVSS 3.110.0
EPSS8.8%
Percentile95th
PatchUnknown
KEV Added2026-09-02
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-441: CWE-441
CWE-918: Server-Side Request Forgery (SSRF)

Attacker causes the server to make HTTP requests to attacker-chosen destinations, potentially reaching internal services.

Related Attack Patterns (CAPEC)
CAPEC-219 XML Routing Detour Attacks
via CWE-441
CAPEC-465 Transparent Proxy Abuse
via CWE-441
CAPEC-664 Server Side Request Forgery
via CWE-918

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A unscored severity vulnerability (CVE-2026-83548) affects the target system. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sen...

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2026-83548?
A unscored severity vulnerability (CVE-2026-83548) affects the target system. A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sen...
What is the CVSS score for CVE-2026-83548?
CVE-2026-83548 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS: 8.8%.
Is CVE-2026-83548 actively exploited?
Yes. CVE-2026-83548 is in the CISA KEV catalog (added 2026-09-02). Active exploitation confirmed. Immediate patching required.
How do I remediate CVE-2026-83548?
Apply vendor patches for CVE-2026-83548. Monitor Sonicwall advisories.
What systems are affected by CVE-2026-83548?
CVE-2026-83548 affects: Sonicwall.
Vulnerability Details
CVE IDCVE-2026-83548
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published2026-09-01
Last Modified2026-09-03
ICS Relevance90%
Weakness (CWE)
CWE-441Server-Side Request Forgery (SSRF)
SourceNVD
Official Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Source: NIST NVD / MITRE CVE Database

Affected Products
VendorProductFixed Version
Sonicwall — —
Remediation

No patch URL on record. Monitor vendor security advisories directly.

Threat Intelligence
● Threat Intelligence Validated: September 2026 | Threat Age: 26 Days
CISA KEV● Active Exploitation Confirmed (added 2026-09-02)
Public ExploitNot confirmed
PoC CodeNot confirmed
Related CVEs affecting Sonicwall
CVE-2026-15409 10.0 A Server-side request forgery (SSRF) vulnerability has been identified in the... CVE-2007-5815 10.0 Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control ... CVE-2021-44228 10.0 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2... CVE-2016-2396 9.9 The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, an... CVE-2016-2397 9.8 The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 ...
View all Sonicwall CVEs →

This Vulnerability Is Being Actively Exploited

CVE-2026-83548 is on the CISA KEV list - confirmed active exploitation in the wild. BreachSpider flags known-exploited CVEs on the ICS assets they affect, with known-exploited status synced daily from CISA.

Create a free account →