Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution

Multiple Vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, which when chained together could allow for remote code execution, potentially leading to full system compromise. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the vulnerabilities could allow for remote code execution.

SonicWall PSIRT has investigated a case indicating there is active exploitation of CVE-2026-83548 and CVE-2026-83549 in the wild.

Multiple Vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, which could allow for remote code execution. Details of the vulnerability are as follows:

Tactic:Initial Access(TA0001):

Technique:Exploit Public-Facing Application(T1190):

Successful exploitation when chained together could allow for remote code execution, potentially leading to full system compromise.

We recommend the following actions be taken:

Copyright©2026 Center for Internet Security®