Hackers Actively Exploiting Critical Vulnerabilities in SonicWall SMA1000 Appliances

Internet appliance firm SonicWall has disclosed a pair of critical vulnerabilities, CVE-2026-83548 and CVE-2026-83549, affecting its SMA1000 series devices. These vulnerabilities, which include a pre-authentication SSRF and a command injection flaw, are actively being exploited by hackers and could lead to complete control of a target device. Organizations are urged to prioritize patching immediately.