# SonicWall confirms exploitation of two SMA 1000 flaws

_Published Thursday, September 3, 2026 at 9:18 AM EDT · Security · Latest · Tier 1 — Major_

![SonicWall confirms exploitation of two SMA 1000 flaws — Primary](https://img.helpnetsecurity.com/wp-content/uploads/2026/07/14165048/sonicwall-1500.webp)

SonicWall confirmed active exploitation of two previously undisclosed vulnerabilities in SMA 1000 secure remote-access appliances, according to Help Net Security. CVE-2026-83548 is a pre-authentication server-side request forgery flaw that can let remote unauthenticated attackers access sensitive functionality and perform unauthorized operations. CVE-2026-83549 is an OS command-injection flaw that can enable remote code execution for authenticated administrators in specific conditions. SonicWall urged customers to apply its hotfix and review systems for compromise.

## Sources

- [Help Net Security](https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/)
- [cyberscoop.com](https://cyberscoop.com/sonicwall-sma1000-zero-days-actively-exploited/)

---
Canonical: https://techandbusiness.org/newswire/wibavpyIQPYX_F-qGW6lrI
Published: 2026-09-03T13:18:53.217Z
Story chronology: 2026-09-02T10:13:16.000Z
Retrieved: 2026-10-18T18:18:23.347Z
Publisher: Tech & Business (techandbusiness.org)