{"vulnerability": "cve-2026-83549", "sightings": [{"uuid": "84b1f779-8e2f-42d3-a32a-16931d30be7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/pylos.co/post/3muicjl43oc2p", "content": "CVE-2026-83548 & CVE-2026-83549", "creation_timestamp": "2026-09-01T20:54:15.651228Z"}, {"uuid": "c27d6981-ff44-4ff3-90ad-99b84f7cd615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijorxaky2a", "content": "\ud83d\udfe0 CVE-2026-83549 - High (7.8)\n\nPost-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Comman...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-83549/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:02:27.444114Z"}, {"uuid": "9307acfc-7485-44b5-9756-e0f5668420e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117200178156824573", "content": "Tiens, encore du #SonicWall SMA1000 ...\nDeux nouvelles vuln\u00e9rabilit\u00e9s 0-day, CVE-2026-83548 (CVSS 10) et CVE-2026-83549, activement exploit\u00e9es.\nLa premi\u00e8re permet une SSRF sans authentification, la seconde une injection de commandes/RCE. Les deux peuvent \u00eatre cha\u00een\u00e9es pour arriver \u00e0 une RCE sans authentification sur l'appliance.\nSont concern\u00e9s les SMA1000 6210, 7210 et 8200v.\nPas de workaround : hotfix \u00e0 appliquer au plus vite. \u2639\ufe0f \nEt SonicWall dans la doc d\u00e9di\u00e9e ne s\u2019arr\u00eate pas au patch : recherche d\u2019IoC recommand\u00e9e et, si compromission d\u00e9tect\u00e9e, re-image/redeploy de l\u2019appliance + reset des mots de passe admin/utilisateurs et des tokens TOTP.\n\u00c0 noter : les SSL-VPN des firewalls SonicWall et la gamme SMA100 ne sont pas concern\u00e9s.\nBref, si vous avez du SMA1000 expos\u00e9, \u00e7a m\u00e9rite clairement un petit d\u00e9tour dans l\u2019inventaire ce matin. \ud83d\ude43\nAdvisory \ud83e\ude79 \ud83d\udc47 https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016\n#CyberVeille", "creation_timestamp": "2026-09-02T07:06:37.115604Z"}, {"uuid": "ddd97f0f-52b8-4a8f-b90c-b4edef1ad0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mujkb3qhja2j", "content": "SonicWall says attackers are chaining two actively exploited SMA1000 zero-days, CVE-2026-83548 and CVE-2026-83549, for remote code execution on 6210, 7210, and 8200v appliances. #SonicWall #SMA1000 #CVE202683548", "creation_timestamp": "2026-09-02T08:45:20.851390Z"}, {"uuid": "17bc5342-329e-45a1-8f45-132a67c8d81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "exploited", "source": "https://t.me/information_security_channel/55836", "content": "SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks\nhttps://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/\n\nThe vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.\nThe post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks (https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-02T09:00:06.249565Z"}, {"uuid": "b5d03dbe-3117-4de2-953f-bb1379b98cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3mujo6l6bgs25", "content": "\ud83d\udcbb TECH: SonicWall warns two SMA1000 zero-days exploited in wild \u2014 CVE-2026-83548 (CVSS 10.0, pre-auth SSRF) and CVE-2026-83549. Affects 6210/7210/8200v. Patch with hotfixes 12.4.3-03526 / 12.5.0-02952+. Update now.\n#CyberSecurity #TechNews #SonicWall\nhttps://dailytoolbox.org", "creation_timestamp": "2026-09-02T09:55:30.723385Z"}, {"uuid": "3ba2c80f-d840-479c-8cf4-eaf8846e1b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mujqcrbmbq2z", "content": "SonicWall SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u3001\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306e\u60aa\u7528\u3067\u653b\u6483\u3092\u53d7\u3051\u308b\n\n\u653b\u6483\u8005\u304cSonicWall SMA 1000\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u5b58\u5728\u3059\u308b\u672a\u516c\u8868\u306e\u8106\u5f31\u60272\u4ef6(CVE-2026-83548\u3001CVE-2026-83549)\u3092\u60aa\u7528\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u3001SonicWall\u304c\u706b\u66dc\u65e5\u306b\u78ba\u8a8d\u3057\u305f\u3053\u3068\u3067\u660e\u3089\u304b\u306b\u306a\u308a\u307e\u3057\u305f\u3002 \u8106\u5f31\u6027\u306e\u8a73\u7d30(CVE-2026-83548\u3001CVE-2026-835...", "creation_timestamp": "2026-09-02T10:33:39.480983Z"}, {"uuid": "0bc07068-8edc-4748-a4a1-f81153ae728b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mujslgmasf2u", "content": "SonicWall has reported active exploitation of two critical vulnerabilities in SMA1000 Series appliances. CVE-2026-83548, with a CVSS score of 10.0, allows unauthenticated access to sensitive functions via a server-side request forgery. CVE-2026-83549, scoring 7.", "creation_timestamp": "2026-09-02T11:14:18.440325Z"}, {"uuid": "6eae368b-cea9-4907-9845-ff6bb4fde02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/techstart.bsky.social/post/3mujvnpq5dr2a", "content": "\ud83d\udea8 SonicWall SMA 1000 est\u00e1 na mira de ataques. Duas vulnerabilidades zero day, CVE-2026-83548 e CVE-2026-83549, est\u00e3o sendo exploradas ativamente. \ud83d\udd10\n\nA recomenda\u00e7\u00e3o \u00e9 direta: aplique a corre\u00e7\u00e3o imediatamente e verifique poss\u00edveis sinais de comprometimento. Em seguran\u00e7a, deixar para atualizar depois", "creation_timestamp": "2026-09-02T12:09:15.425026Z"}, {"uuid": "6798d09d-0884-4ed2-8da3-3787f08835f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/9/erneut-kritische-sicherheitslucken-in-sonicwall-sma1000-series-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-09-02T12:15:05.758876Z"}, {"uuid": "fe56b485-f4dd-484d-8d65-2875fd3cf309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mujxew452u2p", "content": "\ud83d\udd17 CVE : CVE-2026-83548, CVE-2026-83549", "creation_timestamp": "2026-09-02T12:40:09.591392Z"}, {"uuid": "a9664400-835f-4029-aa11-270e882d80be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruikte-kwetsbaarheden-in-sonicwall-sma-1000-apparaten-voer-updates-uit", "content": "", "creation_timestamp": "2026-09-02T12:45:43.268537Z"}, {"uuid": "7af1f43b-23ee-4b9b-93af-ffd7a688112a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://social.numerique.gouv.fr/users/cert_fr/statuses/117201536283272602", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\nLes vuln\u00e9rabilit\u00e9s CVE-2026-83548 et CVE-2026-83549 affectent les SMA 1000 et permettent une SSRF ainsi que l'ex\u00e9cution de code arbitraire \u00e0 distance.Elles sont activement exploit\u00e9es.\nhttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-009/", "creation_timestamp": "2026-09-02T12:52:04.315944Z"}, {"uuid": "223156f4-8d05-4608-859d-d74ae7eec450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mujy27glu72f", "content": "\u26a0\ufe0fAlerte CERT-FR\u26a0\ufe0f\n\nLes vuln\u00e9rabilit\u00e9s CVE-2026-83548 et CVE-2026-83549 affectent les SMA 1000 et permettent une SSRF ainsi que l'ex\u00e9cution de code arbitraire \u00e0 distance.\nElles sont activement exploit\u00e9es.\n\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-09-02T12:52:04.491242Z"}, {"uuid": "9be953eb-a665-4456-b2c5-4d58a94015ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muk5ok3fam26", "content": "CVE-2026-83549 is trending. Hype score 7, currently #8 on cvemon.\n\nPost-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-83549", "creation_timestamp": "2026-09-02T14:32:52.541689Z"}, {"uuid": "6c4cc716-8fd5-48de-9349-5725b61b66e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muk75phexw2k", "content": "\ud83e\udd16 SonicWall SMA 1000 zero-days exploited in the wild: CVE-2026-83548 (CVSS 10.0) pre-auth SSRF + CVE-2026-83549 (CVSS 7.8) post-auth command injection. Chained attacks; patches released.\nhttps://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html", "creation_timestamp": "2026-09-02T14:59:15.288320Z"}, {"uuid": "6b4b1a8a-cc72-4c1b-8766-047ff364d409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mukaixk3ec2h", "content": "\u26a0\ufe0f Vuln\u00e9rabilit\u00e9s SonicWall Secure Mobile Access (SMA).\n\n\ud83d\udce2 Le @cert-fr.bsky.social a publi\u00e9 une alerte de s\u00e9curit\u00e9 concernant les vuln\u00e9rabilit\u00e9s CVE-2026-83548 et CVE-2026-83549 affectant les SonicWall Secure Mobile Access (SMA).\n\n\u27a1\ufe0f + d'infos sur :\nwww.cert.ssi.gouv.fr/alerte/CERTF...", "creation_timestamp": "2026-09-02T15:23:32.837056Z"}, {"uuid": "d8ad6a6a-89f9-4181-8dc9-1b4f5521b321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sonicwall-rilevato-sfruttamento-in-rete-delle-cve-2026-83548-e-cve-2026-83549", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-83548 e CVE-2026-83549 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nel prodotto Secure Mobile Access (SMA) 1000 Series, soluzione per l'accesso remoto sicuro alle risorse aziendali.", "creation_timestamp": "2026-09-02T16:00:38.762366Z"}, {"uuid": "f6aad03c-7533-4f36-b2e8-bbc4c2d0d7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/sonicwall-security-advisory-av26-872", "content": "", "creation_timestamp": "2026-09-02T16:15:05.752587Z"}, {"uuid": "8798faca-dafd-4f72-a893-c143ea4502e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117202568444183174", "content": "\ud83d\udcf0 SonicWall Warns of Two Actively Exploited Zero-Days in SMA1000\n\ud83d\udea8 BREAKING: SonicWall warns of two actively exploited zero-days (CVE-2026-83548, CVE-2026-83549) in SMA 1000 appliances. Attackers chain the flaws for unauthenticated RCE. Patches are available and must be applied immediately. #ZeroDay #SonicWall #C...\n\ud83d\udd17 https://cyber.netsecops.io/articles/sonicwall-sma1000-zero-day-vulnerabilities-actively-exploited/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-02T17:14:31.958805Z"}, {"uuid": "308e978e-f902-4877-99b2-a55648eb3c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mukgqbxpq32h", "content": "\ud83d\udea8 BREAKING: SonicWall warns of two actively exploited zero-days (CVE-2026-83548, CVE-2026-83549) in SMA 1000 appliances. Attackers chain the flaws for unauthenticated RCE. Patches are available and must be applied immediately. #ZeroDay #SonicWall #C...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-02T17:14:55.747189Z"}, {"uuid": "1e14122d-d251-4a6f-8f0f-8701521a8914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukhlbxxcc2h", "content": "\ud83d\uded1 CVE-2026-83549\nSonicWall SMA1000 Appliances\nCVSS 7.8 / EPSS 1% / KEV: No\nTL;DR: Post-authentication Improper Neutralization of Special Elements used in an OS \u2026\nhttps://cvesentinel.com/report/CVE-2026-83549?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T17:30:01.015155Z"}, {"uuid": "c193c9f6-e1c1-4f58-b137-718116d25020", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/106b930f-4683-4444-9294-4ecc2e72b435", "content": "", "creation_timestamp": "2026-09-02T18:00:04.133916Z"}, {"uuid": "0eae87c3-3e57-4828-9279-d6a0bc777872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mukjt2j6l72h", "content": "\ud83d\uded1 CVE-2026-83549\nSonicWall SMA1000 Appliances\nCVSS 7.8 / EPSS 1% / KEV \u2705\nTL;DR: Post-authentication Improper Neutralization of Special Elements used in an OS Co\u2026\nhttps://cvesentinel.com/report/CVE-2026-83549?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-02T18:10:09.989879Z"}, {"uuid": "ef717cde-cca2-4793-bf47-28d5880c10b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://t.me/true_secator/8571", "content": "SonicWall \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0442 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 SMA1000 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVE-2026-83548) \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 WorkPlace \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SMA1000.\n\n\u042d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 0-day \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2026-83549) \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c SMA1000, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nSonicWall PSIRT \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0435\u043b\u0438 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 SSL-VPN \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall \u0438\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA 100.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA1000,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0441\u0435\u0442\u0438, \u0445\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\nSonicWall \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u041e\u0421 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b TOTP, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043f\u0438\u0441\u043a\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 IOC.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e SMA1000 - \u044d\u0442\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0430\u0442\u0430\u043a.\n\n\u0412 \u0438\u044e\u043b\u0435 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SonicWall SMA1000 (CVE-2026-15409 \u0438 CVE-2026-15410)\u00a0\u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043d\u0435\u0434\u0435\u043b\u044c\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 VPN-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 CISA \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c,\u00a0\u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00a0\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043d\u0443\u043b\u044f \u0432 SMA1000 (CVE-2025-40602), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root.\n\n\u041c\u0435\u0441\u044f\u0446\u0435\u043c \u0440\u0430\u043d\u0435\u0435 SonicWall \u0441\u0432\u044f\u0437\u0430\u043b\u0430 APT-\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u00a0\u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u0437\u043b\u043e\u043c\u0435\u00a0\u0431\u043e\u043b\u0435\u0435 100 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 SSLVPN SonicWall\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043e\u0431\u0449\u0435\u043c, \u043e\u0436\u0438\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b.", "creation_timestamp": "2026-09-02T19:00:04.518640Z"}, {"uuid": "28a66b4c-8141-4619-93ac-abb4be9637a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202988713449046", "content": "Looks like CISA's on a roll. Seven vulnerabilities have been added to the catalogue.\n- CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83549\n- CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-83548\n- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-9586\n- CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-82329\n- CVE-2026-49869: Kestra OSS OS Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-49869\n- CVE-2026-48710: Kludex Starlette HTTP Request/Response Smuggling Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-48710\n- CVE-2026-59822: BerriAI LiteLLM Improper Authentication Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-59822 #CISA #infosec #vulnerability", "creation_timestamp": "2026-09-02T19:01:24.394991Z"}, {"uuid": "7530ff84-57e4-4847-8e8b-f0c27ebe4cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mukqlj5nou2r", "content": "~Cybergcca~\nSonicWall CVE-2026-83548/83549 and JFrog CVE-2026-82329 are being exploited and added to CISA KEV.\n-\nIOCs: CVE-2026-83548, CVE-2026-83549, CVE-2026-82329\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-02T20:11:12.065871Z"}, {"uuid": "d1b338b1-bd7a-4012-a65a-bda68c0b466b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6701a3fe-0836-46a0-9862-641aaddec085", "content": "", "creation_timestamp": "2026-09-02T21:00:32.764937Z"}, {"uuid": "31afb1ab-0674-4ee7-80a0-3afdace0ebe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mukusw4gmk24", "content": "Warnung vor zwei #Schwachstellen (CVE-2026-83548, CVE-2026-83549) in der #SMA1000-Series des Herstellers #SonicWall. Diese werden bereits bei Angriffen ausgenutzt, also patchen.\n\nborncity.com/blog/2026/09...", "creation_timestamp": "2026-09-02T21:26:53.566776Z"}, {"uuid": "fcfcaa79-f4bd-4631-ab3e-7269c008ce20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117203562896831107", "content": "Warnung vor zwei #Schwachstellen (CVE-2026-83548, CVE-2026-83549) in der #SMA1000-Series des Herstellers #SonicWall. Diese werden bereits bei Angriffen ausgenutzt, also patchen.\nhttps://borncity.com/blog/2026/09/02/sonicwall-sma1000-series-kritische-schwachstelle-ausgenutzt-sept-2026/", "creation_timestamp": "2026-09-02T21:27:24.321730Z"}, {"uuid": "f92fee22-179b-4514-93b6-a52327fb54ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-83549", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mukwubzzvp2u", "content": "Overview On September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploi...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild", "creation_timestamp": "2026-09-02T22:03:29.120064Z"}, {"uuid": "d9a6eb06-9849-47a3-926d-d43204b15c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/117203607373711868", "content": "Warning about two #vulnerabilities (CVE-2026-83548, CVE-2026-83549) in the #SMA1000 series from #SonicWall. These are already being exploited in attacks, so apply the patches.\nhttps://borncity.com/win/2026/09/02/sonicwall-sma1000-series-critical-vulnerability-exploited-sept-2026/", "creation_timestamp": "2026-09-02T21:38:43.023409Z"}, {"uuid": "b1e21a96-2bb8-4e89-824c-b49399269af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mukyxxw5dv27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-83549", "creation_timestamp": "2026-09-02T22:41:20.486157Z"}, {"uuid": "439b76d1-46b8-420c-b3c5-7c7cfc720fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mul2gtaspb2x", "content": "\ud83e\udd16 CVE-2026-83548 + CVE-2026-83549: SonicWall SMA 1000 zero-days (pre-auth SSRF CVSS 10.0 + command injection) chain into unauthenticated RCE. Actively exploited, in CISA KEV.\nhttps://www.darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce", "creation_timestamp": "2026-09-02T23:07:32.329513Z"}, {"uuid": "1e86bf70-112f-43a4-b5fa-97fe068e0812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "exploited", "source": "https://t.me/true_secator/8571", "content": "SonicWall \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0442 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 SMA1000 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVE-2026-83548) \u0438 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 WorkPlace \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SMA1000.\n\n\u042d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 0-day \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2026-83549) \u0432 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c SMA1000, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u041e\u0421 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nSonicWall PSIRT \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0435\u043b\u0438 SMA1000 6210, 7210 \u0438 8200v, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 SSL-VPN \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 SonicWall \u0438\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 SMA 100.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA1000,\u00a0\u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u0441\u0435\u0442\u0438, \u0445\u043e\u0442\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u044d\u0442\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\nSonicWall \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u041e\u0421 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b TOTP, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0441\u043f\u0438\u0441\u043a\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 IOC.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e SMA1000 - \u044d\u0442\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0430\u0442\u0430\u043a.\n\n\u0412 \u0438\u044e\u043b\u0435 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SonicWall SMA1000 (CVE-2026-15409 \u0438 CVE-2026-15410)\u00a0\u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043d\u0435\u0434\u0435\u043b\u044c\u00a0\u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 VPN-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 CISA \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c,\u00a0\u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00a0\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043d\u0443\u043b\u044f \u0432 SMA1000 (CVE-2025-40602), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root.\n\n\u041c\u0435\u0441\u044f\u0446\u0435\u043c \u0440\u0430\u043d\u0435\u0435 SonicWall \u0441\u0432\u044f\u0437\u0430\u043b\u0430 APT-\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u00a0\u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u0437\u043b\u043e\u043c\u0435\u00a0\u0431\u043e\u043b\u0435\u0435 100 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 SSLVPN SonicWall\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043e\u0431\u0449\u0435\u043c, \u043e\u0436\u0438\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b.", "creation_timestamp": "2026-09-03T00:00:39.166985Z"}, {"uuid": "bcfd9a5a-b490-412f-a7b1-2034b7e7a57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "exploited", "source": "https://t.me/information_security_channel/55836", "content": "SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks\nhttps://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/\n\nThe vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.\nThe post SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks (https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-03T00:00:51.321255Z"}, {"uuid": "5d4e84a3-e8cd-45b3-9211-e28fd153f8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/9/erneut-kritische-sicherheitslucken-in-sonicwall-sma1000-series-aktiv-ausgenutzt-updates-verfugbar", "content": "2.September 2026\n\nBeschreibung\n\nIn SonicWalls SMA1000 Series Appliances existieren zwei schwerwiegende Sicherheitslücken. Die schwerwiegendere der beiden Schwachstellen ermöglicht es Angreifer:innen aus der Ferne und ohne Authentifizierung, die Appliance dazu zu bringen, serverseitig Anfragen an eigentlich nicht erreichbare interne Endpunkte zu senden (Server-Side Request Forgery). Laut SonicWall PSIRT werden die in diesem Advisory beschriebenen Schwachstellen bereits aktiv ausgenutzt.\n\nCVE-Nummer(n): CVE-2026-83548, CVE-2026-83549\n\nCVSS Base Score: 10.0 (bzw. 7.8)\n\nAuswirkungen\n\nCVE-2026-83548 ist eine Server-Side-Request-Forgery-Schwachstelle (SSRF) im Work-Place-Interface der SMA1000 Appliance. Ein:e entfernte:r, nicht authentifizierte:r Angreifer:in kann die Appliance dazu bringen, serverseitig Anfragen an eigentlich nicht erreichbare interne Endpunkte zu senden. Der Hersteller gibt für diese Schwachstelle einen CVSS Base Score von 10.0 an.\n\nBei CVE-2026-83549 handelt es sich um eine 'Command Injection' die es angemeldeten AdministratorInnen, aufgrund einer unsachgemäßen Neutralisierung, erlaubt Betriebssystembefehle auszuführen.\n\nBetroffene Systeme\n\nBetroffen sind die SMA1000 Modelle 6210, 7210 und 8200v in folgenden Versionen:\n\n\n\n12.4.3-03453 (platform-hotfix) und ältere Versionen.\n\n12.5.0-02835 (platform-hotfix) und ältere Versionen.\n\n\nLaut Hersteller sind SSL-VPN auf SonicWall-Firewalls sowie die SMA 100 Series Produktlinie nicht von diesen Schwachstellen betroffen.\n\nAbhilfe\n\nSonicWall stellt für betroffenen Modelle einen platform-hotfix bereit, der die Schwachstellen behebt:\n\n\n\n12.4.3-03526 (platform-hotfix) und höher.\n\n12.5.0-02952 (platform-hotfix) und höher.\n\n\nDa keine Workarounds existieren, und SonicWall die aktive Ausnutzung der beschriebenen Lücken beobachtet hat, empfiehlt sich ein rasches einspielen der verfügbaren Hot-Fixes. \n\nHinweis\n\nGenerell empfiehlt CERT.at, sämtliche Software aktuell zu halten und dabei insbesondere auf automatische Updates zu setzen. Regelmäßige Neustarts stellen sicher, dass diese auch zeitnah aktiviert werden.\n\n\n\nInformationsquelle(n):\n\nSonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilitieshttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016\n\n ", "creation_timestamp": "2026-09-03T01:00:32.631627Z"}, {"uuid": "593f66e2-fc35-4780-820b-9bfa9837d53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-83549", "type": "seen", "source": "https://www.acn.gov.it/portale/w/sonicwall-rilevato-sfruttamento-in-rete-delle-cve-2026-83548-e-cve-2026-83549", "content": "Rilevato lo sfruttamento attivo in rete delle vulnerabilit\u00e0 CVE-2026-83548 e CVE-2026-83549 \u2013 gi\u00e0 sanate dal vendor \u2013 presenti nel prodotto Secure Mobile Access (SMA) 1000 Series, soluzione per l'accesso remoto sicuro alle risorse aziendali.", "creation_timestamp": "2026-09-03T01:00:33.061151Z"}]}