CVE-2026-83549

SonicWall SMA1000 Appliances OS Command Injection Vulnerability

7.8
CVSS 3.1
10.8 %
EPSS (current)
2026-09-02
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: SonicWall / SMA1000 Appliances

Published: 2026-09-01 · Due (CISA): 2026-09-05

CWE: CWE-78 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/linux/http/sonicwall_sma1000_couchdb_rceexploit/linux/http/sonicwall_sma1000_couchdb_rce2026-09-01

References only — no downloads or instructions.

Sources