Forwarded from the National Institute of Cyber Security Cybersecurity Alert NISAC-200-202609-00000008

Researchers discovered that SonicWall NSM On-Prem and the SMA1000 Series contain multiple high-risk security vulnerabilities (CVE-2026-78327, CVE-2026-83548, and CVE-2026-83549), including OS Command Injection and Server-Side Request Forgery vulnerabilities. Among them, CVE-2026-83548 and CVE-2026-83549 have been exploited by hackers. Please confirm and apply patches as soon as possible.

【CVE-2026-78327】A remote attacker who has obtained administrative privileges may inject arbitrary operating system commands through the management interface, thereby executing arbitrary code on the underlying host.

【CVE-2026-83548】An unauthenticated remote attacker may exploit an unintended alternate access path to access sensitive functions and perform unauthorized operations.

【CVE-2026-83549】Under specific conditions, an authenticated remote attacker may execute arbitrary operating system commands as an administrator through the Appliance Management Console (AMC), thereby executing arbitrary code.