CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
- Record
CVE-2026-83548- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-918, CWE-441
- Updated
- 2026-11-02
EUVDEUVD-2026-69704
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
- Record
EUVD-2026-69704- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-ghw2-cfh2-xvgc
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
- Record
GHSA-ghw2-cfh2-xvgc- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-441
- Updated
- 2026-11-02
CISA KEV No score
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations.
- Record
CVE-2026-83548- Weakness
- CWE-918, CWE-441
- Updated
- 2026-11-02
NVD
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.
- Record
CVE-2026-83548- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-441, CWE-918
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | SonicWall SMA1000 WorkPlace SSRF to Root Remote Code Execution | 2026-09-01 |
| PoC in GitHub | xoessie/CVE-2026-83548-SonicWall-SMA1000-Analysis | 2026-09-03 |
| PoC in GitHub | xcoy0te/CVE-2026-83548-checker | 2026-09-04 |
| PoC in GitHub | HORKimhab/CVE-2026-83548-CVE-2026-83549 | 2026-09-08 |
| PoC in GitHub | maxprog-svg/CVE-2026-83548 | 2026-10-25 |
| Nuclei | SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDB |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-83548 is a critical vulnerability (CVSS 10.0) in Sonicwall Sma1000, published September 1, 2026. CISA lists it as known to be exploited, since September 2, 2026. EUVD reports exploitation since September 2, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.04%, the 94th percentile. No source names a fixed version.