CVE-2026-83549: sonicwall sma8200v, sonicwall sma6210_firmware, sonicwall sma7210_firmware

CVSS 7.8 (high) · listed as exploited by CISA since 2026-09-02 · published 2026-09-01

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.

Affected products (NVD): sonicwall sma8200v, sonicwall sma6210_firmware, sonicwall sma7210_firmware

Fixed in (NVD): 12.4.3-03526, 12.5.0-02952

Weakness: CWE-78

Source: NVD CVE-2026-83549

References

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-83549

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.