CISA Warns of Actively Exploited SonicWall SMA1000 Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two SonicWall SMA1000 appliance vulnerabilities (CVE-2026-83549 and CVE-2026-83548) to its Known Exploited Vulnerabilities catalog, confirming active exploitation in real-world attacks. Federal civilian agencies are required to address these risks by September 5, 2026. CVE-2026-83549 is an OS command injection flaw, and CVE-2026-83548 is a server-side request forgery vulnerability, both allowing remote attackers to compromise affected appliances.