CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerability
Published Sep 1, 2026
·Updated
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
Other sources
SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
— CISA
Affected Software
11 affected components
SMA1000 Appliance Management Console SMA1000 Appliance Management Console (AMC)
SonicWall SMA1000 Appliances
All of the following
Any of the following
SonicWall Sma8200v<12.4.3-03526
SonicWall Sma8200v>=12.5.0<12.5.0-02952
SonicWall Sma8200v
All of the following
Any of the following
SonicWall Sma6210 Firmware<12.4.3-03526
SonicWall Sma6210 Firmware>=12.5.0<12.5.0-02952
SonicWall Sma6210
All of the following
Any of the following
SonicWall Sma7210 Firmware<12.4.3-03526
SonicWall Sma7210 Firmware>=12.5.0<12.5.0-02952
SonicWall Sma7210
Event History
Sep 1, 2026
CVE Published
via MITRE·09:28 PM
Data Sourced
via MITRE·09:28 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeaknessAffected Software
Sep 2, 2026
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
News Published
via BleepingComputer·06:39 AM
News Published
via BleepingComputer·06:44 AM