CISA KEV: CVE-2026-83549 — SonicWall SMA1000 Appliances actively exploited
SonicWall SMA1000 Appliances OS Command Injection Vulnerability. SonicWall SMA1000 Appliances contains an OS command injection vulnerability that could enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requ