CVE-2026-83549
CVSS7,8Visoko
EPSS (30 dni)9,9 %
CISA KEVDaod 2. 9. 2026
Rok za popravek (CISA)5. 9. 2026
Proizvajalec: Sonicwall · Izdelki: sma6210_firmware, sma7210_firmware, sma8200v
Uporaba v izsiljevalskih napadih: Ni podatka
Opis (NVD, angleško): Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H