Page generated: 10 Nov 2026, 15:26 UTC
← Dashboard

CVE-2026-83548

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perfo…

Read full description
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
CVSS 10.0 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
1.4/10
REALITY · THREAT PRIORITY
8.5/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 10: +1.50
  • Fresh EPSS: 8.04%: +0.04

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 28 documents and public datasets.

Hype components

Headline sample (25%)
20/100
Press, 30 days (60%)
15/100
Grounded branding (15%)
0/100
HYPE TOTAL14/100

Sources and documents

BleepingComputer
Press · 09 Oct 2026, 07:00 · Max severity SonicWall SMA1000 flaw now exploited in attacks - BleepingComputer
Rescana
Press · 09 Oct 2026, 07:00 · SonicWall SMA1000 CVE-2026-102255: Third Pre-Auth SSRF of 2026 Makes "Patched in September" Out of Date - Rescana
Help Net Security
Press · 07 Oct 2026, 07:00 · SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) - Help Net Security
shattered.io
Press · 23 Sep 2026, 07:00 · SonicWall SMA1000 Zero-Day Chain Hits CVSS 10.0 [2026] - shattered.io
shattered.io
Press · 08 Sep 2026, 23:54 · SonicWall SMA1000 Zero-Day Hits CVSS 10, KEV in 3 Days - shattered.io
See all 28 source documents
https://tech-insider.org/
Press · 07 Sep 2026, 07:00 · SonicWall SMA1000 Hit by 2nd Zero-Day, CVSS 10.0 [2026] - https://tech-insider.org/
Check Point Research
Press · 07 Sep 2026, 07:00 · 7th September – Threat Intelligence Report - Check Point Research
MSSP Alert
Press · 04 Sep 2026, 07:00 · Hackers exploit chained SonicWall gaps for remote code execution - MSSP Alert
SOCRadar
Press · 03 Sep 2026, 07:00 · SonicWall CVE-2026-83548 Leads to CISA Alert - SOCRadar
SOC Prime
Press · 03 Sep 2026, 07:00 · CVE-2026-83548 & CVE-2026-83549: SonicWall Zero-Days - SOC Prime
The Hacker News
Press · 03 Sep 2026, 07:00 · CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners - The Hacker News
https://tech-insider.org/
Press · 03 Sep 2026, 07:00 · SonicWall Hit by 2nd SMA 1000 Zero-Day in 3 Weeks [2026] - https://tech-insider.org/
Network World
Press · 02 Sep 2026, 23:20 · SonicWall reports two major security holes under active exploit - Network World
Forkast News
Press · 02 Sep 2026, 07:00 · SonicWall SMA1000 Hit by Second Zero-Day Chain in Seven Weeks, Same SSRF-to-Injection Pattern - Forkast News
Tech Times
Press · 02 Sep 2026, 07:00 · SonicWall SMA1000 Hacked Third Time; MFA Seeds Stolen in July Outlast September Patches - Tech Times
The Hacker News
Press · 02 Sep 2026, 07:00 · Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain - The Hacker News
Cyber Press
Press · 02 Sep 2026, 07:00 · Hackers Exploit Critical SonicWall SMA 1000 SSRF and RCE Flaws in Active Attacks - Cyber Press
SecurityWeek
Press · 02 Sep 2026, 07:00 · SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks - SecurityWeek
SC Media
Press · 02 Sep 2026, 07:00 · SonicWall advises customers to patch two new SMA1000 zero-days - SC Media
Dark Reading
Press · 02 Sep 2026, 07:00 · SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE - Dark Reading
BornCity
Press · 02 Sep 2026, 07:00 · SonicWall SMA1000 Series: Critical Vulnerability Exploited (Sept. 2026)Born's Tech and Windows World - BornCity
BleepingComputer
Press · 02 Sep 2026, 07:00 · SonicWall warns of actively exploited SMA1000 zero-day flaws - BleepingComputer
Help Net Security
Press · 02 Sep 2026, 07:00 · SonicWall SMA 1000 appliances under attack via zero-day flaws - Help Net Security
Security Affairs
Press · 02 Sep 2026, 07:00 · SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs - Security Affairs
Rapid7
Press · 02 Sep 2026, 07:00 · Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild - Rapid7
Sophos
Press · 02 Sep 2026, 07:00 · SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation - Sophos
CERT-FR
Technical advisory · 02 Sep 2026, 00:00 · Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)
CERT-FR
Press · 02 Sep 2026, 00:00 · Multiples vulnérabilités dans SonicWall Secure Mobile Access (02 septembre 2026)

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 1.4 · reality 8.5 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 10; EPSS 8.0%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:27.286257+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
01 Sep 2026, 21:25
Added to the CISA KEV catalog
02 Sep 2026, 00:00
First press mention
02 Sep 2026, 00:00
Latest press mention
09 Oct 2026, 07:00
Score calculated
05 Nov 2026, 14:00