Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain

SonicWall released security updates for two zero-day vulnerabilities in its Secure Mobile Access (SMA) 1000 series VPN appliances, exploited in attacks. The flaws, discovered internally by William Perry and Adam Babis, include CVE-2026-83548, a pre-authentication SSRF vulnerability with a CVSS score of 10.0, potentially forming an attack chain.