NCSC-VD-2609-001-01
الرقم المرجعي: NCSC-VD-2609-001-01
SonicWall
الوصف
The digest reports confirmed active exploitation and strongly urges customers to apply the available hotfix immediately.
CVE-2026-83548: A pre-authentication server-side request forgery in the Work Place interface may allow an unauthenticated remote attacker access to sensitive functionality and unauthorized operations.
CVE-2026-83549: Post-authentication OS command injection in the Appliance Management Console may enable an authenticated administrator to execute arbitrary operating-system commands under specific conditions.
الثغرات
- CVE-2026-83548
A pre-authentication server-side request forgery in the Work Place interface may allow an unauthenticated remote attacker access to sensitive functionality and unauthorized operations.
- CVE-2026-83549
Post-authentication OS command injection in the Appliance Management Console may enable an authenticated administrator to execute arbitrary operating-system commands under specific conditions.