@defensorum.bsky.social🔧 Running a #SonicWall SMA1000 6210, 7210 or 8200v? 🚨 Two zero-days are being actively exploited 🔓 Attackers can chain CVE-2026-83548 and CVE-2026-83549 to achieve remote code execution #CyberSecurity #ZeroDay #InfoSec 👉 www.defensorum.com/sonicwall-sm...
@securityonline.bsky.socialAn active SonicWall SMA 1000 campaign breached a UK council. Learn how the SonicWall SMA 1000 campaign exposed Active Directory records worldwide.
#SonicWall #Cybersecurity #ActiveDirectory #CVE202615409 #InfoSec
@hugovalters.bsky.socialCVE-2026-81939 | SonicWall NSM On-Prem has a Zip Slip path traversal flaw. Attackers can extract files outside the intended directory. CVSS 9.1. No patch yet. Block uploads & restrict NSM access now. Details: https://www.valtersit.com/cve/CVE-2026-81939/ #CVE #infosec #SonicWall
@toxy4ny.bsky.socialTuesday's fuck up - this time great SonicWall - SonicWall SMA1000 unauthenticated RCE
Exploit for last weeks SonicWall SMA1000 zero-day chain that has been exploited in-the-wild (CVE-2026-83548 + SMA1000-9427 + CVE-2026-83549). github.com/rapid7/metas... #redteam #sonicwall #rce #critical #sma1000
@hugovalters.bsky.socialCVE-2026-78328 SonicWall NSM On-Prem flaw lets lower-privileged Admins escalate to SuperAdmin. CVSS 9.1, unpatched. Assume compromise until fixed. Restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-78328/ #CVE #infosec #SonicWall
@securityonline.bsky.socialSonicWall SMA 1000 vulnerabilities are exploited in the wild. Public PoC exploit code is disclosed for the critical SonicWall SMA 1000 exploit chain.
#SonicWall #SMA1000 #CVE202683548 #Vulnerability #CyberSecurity
@hugovalters.bsky.socialCVE-2026-78327: OS Command Injection in SonicWall NSM On-Prem lets SuperAdmin execute arbitrary commands as RCE on the host. CVSS 9.1. Unpatched—assume exposure. Restrict SuperAdmin access now and monitor for updates. https://www.valtersit.com/cve/CVE-2026-78327/ #CVE #SonicWall
@diesec.bsky.socialonicWall SMA1000 hit again: CVE-2026-83548 (CVSS 10.0) + CVE-2026-83549 chain to unauthenticated root RCE. Same appliance we flagged in July. CISA KEV deadline was Sept 5. BSI warning issued. Patch now.
🇬🇧 diesec.com/2026/09/soni...
🇩🇪 diesec.com/de/2026/09/s...
#SonicWall #CyberSecurity
@securityonline.bsky.socialThis weekly CVE report covers 10 exploited vulnerabilities added to CISA KEV and 2,316 new CVEs from Aug 31 to Sep 6, 2026. Patch fast.
#CVE #CISAKEV #ExploitedVulnerabilities #SonicWall #InfoSec #PatchNow #VulnerabilityManagement
@hendryadrian.bsky.socialGoogle patched Chrome's 6th zero-day of 2026 after active exploitation, alongside issues in SonicWall SMA1000, HPE ArubaOS-CX, and Cisco Nexus 9000. WordPress plugins and major breach disclosures also surfaced. #Chrome #SonicWall #France
@hugovalters.bsky.socialCVE-2026-78327 - Critical RCE via OS command injection in SonicWall Network Security Manager. CVSS 9.1. Update immediately. #SonicWall #infosec #cybersecurity
@thenewoil.org#SonicWall warns of actively exploited #SMA1000 zero-day flaws
@threadlinqs.bsky.socialSonicWall SMA1000: an unauthenticated SSRF pivots straight into OS command injection for RCE. https://intel.threadlinqs.com/threat/TL-2026-2307 #ThreatIntel #CVE_2026_83548 #CVE_2026_83549 #SonicWall
@intelnightowl.bsky.socialSonicWall released patches for the two zero‑day vulnerabilities in its SMA 1000 VPN appliances. #SonicWall #ZeroDay #VPN #Security https://securityaffairs.com/198303/security/sonicwall-patches-two-new-actively-exploited-zero-days-in-sma-1000-vpns.html
@hendryadrian.bsky.socialCISA added 7 exploited flaws to KEV, impacting SonicWall, Sangoma, JFrog, Starlette, Kestra, and LiteLLM. Attackers are using them for admin access, reverse shells, miners, and credential theft. #SonicWall #LiteLLM #XMRig
@stemshop.bsky.social🔴 SonicWall SMA1000 — two zero-days under active attack
CVE-2026-83548 (CVSS 10.0) and CVE-2026-83549 are being exploited in the wild. The flaws may be chained to achieve unauthenticated RCE.
#CVE #CVE202683548 #CVE202683549 #SonicWall #ZeroDay #CyberSecurity