Hackers Exploit Critical SonicWall SMA 1000 SSRF and RCE Flaws in Active Attacks

SonicWall has warned that threat actors are actively exploiting two vulnerabilities affecting SMA 1000 series secure access appliances, including a critical pre-authentication server-side request forgery (SSRF) flaw rated 10.0 out of 10 on the CVSS scale. The vulnerabilities, tracked as CVE-2026-83548 and CVE-2026-83549, affect SonicWall SMA 1000 models 6210, 7210, and 8200v running specified older platform-hotfix releases. SonicWall’s Product Security Incident Response Team…