SonicWall's SMA1000 VPN Boxes Skip the Password Entirely: Pre-Auth SSRF Chains to Unauthenticated RCE
CVE-2026-83548 is a pre-auth CVSS 10.0 SSRF in the SMA1000 Work Place interface that chains with post-auth command injection into unauth RCE on internet-facing remote-access gateways. Exploited in the wild, KEV due date Sep 5.