CVE-2026-83549

4 karet z 10 položek · v celém archivu · celý přehled CZ · EN/orig

CVE-2026-83549

KEV ✓ náprava do 5. 9. 2026

Hodnocení závažnosti

7.8 CVSS 3.1 CISA-ADP

útok z místního přístupu bez přípravy stačí běžný účet bez zásahu uživatele

dopad plný únik dat úplná změna dat úplný výpadek

přesah dopad jen na zranitelnou součást

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

zvyšuje závažnost mírně zvyšuje závažnost snižuje závažnost

cve.org · NVD

3. 9. 2026 1

SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities 10

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.0: 10.0, CVEs: CVE-2026-83548, CVE-2026-83549, Summary: 1) CVE-2026-83548 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform…

KEV ✓ CVSS 10.0 CVE-2026-83548 CVE-2026-83549 SonicWall FI US CA IT AT FR 6 zdrojů

tg: zneužíváno tg: zranitelnost

NCSC-FI 3. 9. 04:00 · Rapid7 2. 9. 18:58 · Cyber Centre Kanada 2. 9. 14:47 · CSIRT Itálie (ACN) 2. 9. 11:51 · CERT.at 2. 9. 10:06 · CERT-FR – avis 2. 9. 02:00

2. 9. 2026 3

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-9586 Sangoma Switchvox SQL Injection Vulnerability CVE-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-49869 Kestra OSS OS Command Injection Vulnerability CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CVE-2026-83548…

KEV ✓ EPSS 0.02 CVE-2026-48710 CVE-2026-49869 CVE-2026-59822 CVE-2026-82329 CVE-2026-83548 CVE-2026-83549 CVE-2026-9586 Sangoma SonicWall JFrog Kestra veřejná správa US

tg: zneužíváno tg: zranitelnost

CISA Advisories · 2. 9. 14:00

SonicWall warns of actively exploited SMA1000 zero-day flaws

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks. [...]

KEV ✓ EPSS 0.84 CVE-2025-40602 CVE-2026-15409 CVE-2026-15410 CVE-2026-83548 CVE-2026-83549 SonicWall US

tg: zneužíváno tg: zranitelnost

BleepingComputer · 2. 9. 08:39

SonicWall SMA1000 Appliances OS Command Injection Vulnerability (CVE-2026-83549)

CISA added CVE-2026-83549 to the Known Exploited Vulnerabilities catalog. Affected product: SonicWall SMA1000 Appliances. Remediation due date: 2026-09-05.

KEV ✓ CVE-2026-83549 SonicWall US

tg: zneužíváno tg: zranitelnost

CISA KEV · 2. 9. 02:00