Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-83549

SMA1000 · OS command injection

cve-program · severity unknownCVSS unknownCheck source for fixed versionsCISA KEV

Original advisory

cve-program · CVE-2026-83549

Published

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-83549

Published

SMA1000

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "SonicWall",
                    "product": "SMA1000",
                    "platforms": [
                        "Linux"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "12.4.3-03453 (platform-hotfix) and older versions"
                        },
                        {
                            "status": "affected",
                            "version": "12.5.0-02835 (platform-hotfix) and older versions"
                        }
                    ],
                    "defaultStatus": "unknown"
                }

Original source record · Cite this exact observation · Complete original publisher JSON