SONICWALL has issued a security advisory regarding two newly discovered zero-day vulnerabilities impacting their SMA1000 appliances, specifically models 6210, 7210, and 8200v. The critical vulnerability, CVE-2026-83548, is a pre-authentication server-side request forgery (SSRF) flaw, rated 10.0 on the CVSS scale, allowing attackers to gain unauthorized access. The second issue, CVE-2026-83549, is a post-authentication remote code execution vulnerability with a score of 7.8.
SonicWall advises customers to upgrade to the latest hotfix, monitor for indicators of compromise, and take necessary remediation actions if breaches are suspected. These appliances have become targets for state-sponsored and ransomware attacks due to their role in providing remote access to sensitive corporate networks.