SonicWall Urges Immediate Patching for Actively Exploited Maximum-Severity Vulnerabilities in SMA1000 Appliances

SonicWall has issued an urgent advisory for customers to patch two actively exploited vulnerabilities in its SMA1000 series appliances: CVE-2026-83548 (critical server-side request forgery) and CVE-2026-83549 (high-severity OS command injection). These flaws, with severity scores of 10 and 7.8 respectively, are being chained by attackers to achieve remote code execution. CISA has added these to its Known Exploited Vulnerabilities catalog, mandating federal agencies to mitigate them promptly.