CVE-2026-83548

KEV Critical · CVSS 10.0

CVSS: 10.0; nvd
EPSS: 0.71%; 51th pct
KEV: Listed; 2026-09-02
Class: kernel local; CWE-441, CWE-918

Description

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83548

Status: profiled · ingested 2026-09-03T00:00:49.000Z