Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-83548 Details

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:10 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548 CISA-ADPUS Government Resource
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 [email protected]Vendor Advisory

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability NameDate AddedDue DateRequired Action
SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySep 2, 2026Sep 5, 2026Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-441Unintended Proxy or Intermediary ('Confused Deputy')[email protected]
CWE-918Server-Side Request Forgery (SSRF)[email protected]

Affected Products

ProductVersions
sonicwall sma8200v
< 12.4.3-03526
>= 12.5.0, < 12.5.0-02952

CPE

  • cpe:2.3:a:sonicwall:sma8200v:*:*:*:*:*:*:*:*
  • cpe:2.3:a:sonicwall:sma8200v:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
sonicwall sma6210 firmware
< 12.4.3-03526
>= 12.5.0, < 12.5.0-02952

CPE

  • cpe:2.3:o:sonicwall:sma6210_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
sonicwall sma6210
All versions

CPE

  • cpe:2.3:h:sonicwall:sma6210:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
sonicwall sma7210 firmware
< 12.4.3-03526
>= 12.5.0, < 12.5.0-02952

CPE

  • cpe:2.3:o:sonicwall:sma7210_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
sonicwall sma7210
All versions

CPE

  • cpe:2.3:h:sonicwall:sma7210:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-83548
NVD Published Date:
Sep 1, 2026
NVD Last Modified:
Sep 3, 2026
Source:
[email protected]
CVE-2026-83548 Details - Not Deferred