PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability

Vendor: SonicWall
Product: SMA1000 Appliances
EPSS: 0.099 (95.6th percentile, 2026-10-30)

Summary

SonicWall SMA1000 Appliances contain an OS command injection vulnerability that could enable a remote authenticated attacker with administrator privileges to execute arbitrary OS commands, resulting in remote code execution. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-09-02.

Reviewed by PerimeterClock.

Timeline

Date Event Source
2026-09-02 Added to CISA KEV (confirmed exploitation) CISA KEV
2026-09-04 First public PoC repo seen GitHub

References

Affected and fixed versions: see the vendor advisory or NVD entry below.