Skip to main content
عربي
logo

NCSC-VD-2609-001-01

Severity Level: Critical

Reference No.: NCSC-VD-2609-001-01

SonicWall

Description

The digest reports confirmed active exploitation and strongly urges customers to apply the available hotfix immediately.

CVE-2026-83548: A pre-authentication server-side request forgery in the Work Place interface may allow an unauthenticated remote attacker access to sensitive functionality and unauthorized operations.

CVE-2026-83549: Post-authentication OS command injection in the Appliance Management Console may enable an authenticated administrator to execute arbitrary operating-system commands under specific conditions.

Vulnerabilities

  • CVE-2026-83548

    A pre-authentication server-side request forgery in the Work Place interface may allow an unauthenticated remote attacker access to sensitive functionality and unauthorized operations.

  • CVE-2026-83549

    Post-authentication OS command injection in the Appliance Management Console may enable an authenticated administrator to execute arbitrary operating-system commands under specific conditions.

References