[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6gsUfC0jsN-ebL5TPC7blMcfSX3vcvFDhuqKL2MgF9E":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":150},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"5ebd8333-9751-435b-806f-ba3c6c402783","SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks","sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks-3e24cc","The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution. The post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks appeared first on SecurityWeek.","SonicWall has issued an urgent warning to customers regarding two zero-day vulnerabilities in its SMA1000 series secure remote access gateway and SSL-VPN appliance. The flaws, CVE-2026-83548 and CVE-2026-83549, have been observed being exploited in the wild, potentially chained together for unauthenticated remote code execution. Affected models include 6210, 7210, and 8200v, with hotfixes available for patching.","SonicWall warns of two zero-day vulnerabilities in SMA1000 devices being exploited.","https:\u002F\u002Fwww.securityweek.com\u002Fsonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F08\u002FSonicWall.jpg","2026-09-02T05:04:52+00:00","2026-09-02T06:00:26.77755+00:00",9,[17,20,23],{"name":18,"type":19},"SMA1000","product",{"name":21,"type":22},"SonicWall","vendor",{"name":24,"type":25},"SSL-VPN","technology","574f766a-fb3f-487c-8d2c-0720ae75471b",{"id":26,"icon":28,"name":29,"slug":30},null,"Zero-day","zero-day",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-83548","Pre-authentication SSRF vulnerability in SMA1000 Appliance Work Place interface.",{"type":51,"value":55,"context":56},"CVE-2026-83549","OS command injection vulnerability in SMA1000 Appliance Management Console.",[21,18],{"controls":59,"vendors":143},[60,89,118],{"slug":61,"name":62,"problem":63,"products":64},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"slug":90,"name":91,"problem":92,"products":93},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":119,"name":120,"problem":121,"products":122},"patch-management","Automated patch management","Known holes get closed in days, not months.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":119,"product_name":140,"url":141,"description":142},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[144],{"slug":145,"name":21,"logo_path":146,"roles":147},"sonicwall","\u002Fvendor-logos\u002Fsonicwall.png",[148,149],"affected","reported_by",{"slug":151,"title":152,"body":153,"framework_refs":154,"framework_notes":165},"sonicwall-sma1000-zero-days-exploited-in-the-wild-patch-immediately-1788330020025","SonicWall SMA1000 Zero-Days Exploited in the Wild — Patch Immediately","Two chained zero-day vulnerabilities in SonicWall's SMA1000 remote access gateways are being actively exploited, enabling unauthenticated remote code execution — one of the most severe threat profiles possible. Because these are zero-days, defenders had no advance warning, making rapid detection and emergency patching capabilities critical. Internet-facing VPN and remote access appliances are high-value targets because compromising them can grant attackers a foothold into the entire internal network. Organizations that lack a tested emergency patching workflow or real-time vulnerability visibility on perimeter devices are especially exposed. The availability of hotfixes means the window to remediate is open now, but every hour of delay increases risk.",[155,156,157,158,159,160,161,162,163,164],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST SC-7: Boundary Protection (Network Segmentation)","NIST IR-4: Incident Handling","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL: Change Management \u002F Emergency Change Process","ISO\u002FIEC 27001:2022 – A.8.8: Management of Technical Vulnerabilities",{}]