SonicWall has released a security update to address a vulnerability discovered in the SMA1000 product.
Affected models include the SMA1000 6210, 7210, and 8200v.
The vulnerabilities addressed as follows are as follows:
CVE-2026-83548: A pre-authentication SSRF (Server-Side Request Forgery) vulnerability occurring in the SonicWall SMA1000 WorkPlace interface.
CVE-2026-83549: A post-authentication remote code execution vulnerability occurring in the SonicWall SMA1000 management console.
The affected versions are SMA1000 6210, 7210, and 8200v running 12.4.3-03453 (Platform-hotfix) or earlier, and 12.5.0-02835 (Platform-hotfix) or earlier.
A patch has been provided via the latest update; for the SMA1000 6210, 7210, and 8200v running version 12.4.3-03526 (Platform-hotfix) or later and version 12.5.0-02952 (Platform-hotfix) or later are the fixed versions.
Users of these products should update to the latest version.
The reference site includes guidance titled “SonicWall SMA1000 Series Appliances Affected by Multiple Vulnerabilities.”
