SonicWall discloses two SMA1000 zero-days chained for unauthenticated RCE

SonicWall has disclosed two zero-day vulnerabilities in its SMA1000 series, CVE-2026-83549 and CVE-2026-83548, which can be chained for unauthenticated remote code execution. The vendor reports active exploitation in attacks, though specific threat actors and scope remain undisclosed. This is a critical security development for organizations using SMA1000 appliances, as unauthenticated RCE poses a direct compromise risk.