{"id":2397,"date":"2026-09-04T05:00:00","date_gmt":"2026-09-04T05:00:00","guid":{"rendered":"https:\/\/netguide.io\/news\/?p=2397"},"modified":"2026-09-04T05:00:00","modified_gmt":"2026-09-04T05:00:00","slug":"sonicwall-sma-1000-zero-day-cve-2026-83548-83549","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/de\/2026\/09\/04\/sonicwall-sma-1000-zero-day-cve-2026-83548-83549\/","title":{"rendered":"SonicWall SMA 1000: Zwei aktiv ausgenutzte Zero-Days erm\u00f6glichen unauth RCE"},"content":{"rendered":"<div id=\"netgu-3103139572\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div><p class=\"wp-block-paragraph\"><strong>SonicWall hat am 1. September 2026 zwei Schwachstellen in seinen SMA-1000-Appliances offengelegt, die laut Hersteller bereits aktiv ausgenutzt werden. Verkettet ergeben sie eine unauthentifizierte Remote-Code-Execution \u2013 ein Vollzugriff auf das VPN-Gateway ohne g\u00fcltige Zugangsdaten.<\/strong><\/p>\n\n<h3 class=\"wp-block-heading\">Die beiden L\u00fccken im Detail<\/h3>\n\n<p class=\"wp-block-paragraph\"><strong>CVE-2026-83548<\/strong> ist eine pre-auth Server-Side Request Forgery (SSRF) im &#8220;Work Place&#8221;-Interface und erreicht mit CVSS 10.0 den H\u00f6chstwert. Sie erlaubt unauthentifizierten Angreifern Zugriff auf sensible Funktionen. <strong>CVE-2026-83549<\/strong> (CVSS 7.8) ist eine OS-Command-Injection in der Appliance Management Console (AMC), die ein als Administrator authentifizierter Angreifer f\u00fcr beliebige Systembefehle nutzen kann. In Kombination l\u00e4sst sich die Authentifizierung umgehen und daraus eine unauthentifizierte RCE bauen. SMA-1000-Ger\u00e4te sind als VPN- und Zugangs-Gateways typischerweise direkt aus dem Internet erreichbar, was ihre Kompromittierung besonders folgenreich macht: Wer die Appliance kontrolliert, sitzt am Perimeter des Firmennetzes.<\/p><div id=\"netgu-888049334\" class=\"netgu-content netgu-entity-placement\"><aside class=\"deals-top deals-top--compact\">\r\n\r\n\t\t\t<h3 class=\"deals-top__title\">Top-Deals<\/h3>\r\n\t\r\n\t\t\t<ul class=\"deals-top__list\">\r\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\r\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/amazon-kindle-scribe-64-gb-neuartiges-display-mit-gleichmaessigem-rahmen-schreib-einfach-in-buecher-und-dokumente-mit-notizbuchzusammenfassung-mit-premi\/\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/kindle_shopall_310mmTall-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\r\n\t\t\t\t\t\t\r\n\t\t\t\t\t\t<span class=\"deals-top__body\">\r\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Amazon Kindle Scribe (64 GB) \u2013 Neuartiges Display mit gleichm\u00e4\u00dfigem Rahmen | Schreib einfach in B\u00fccher und Dokumente | Mit Notizbuchzusammenfassung | Mit Premi\u2026<\/span>\r\n\r\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">329.99 \u20ac<\/span>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>421.02 \u20ac<\/s>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-22%<\/span>\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t\t<\/span>\r\n\r\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\r\n\t\t\t\t\t\t\t0\u00b0\r\n\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t<\/a>\r\n\t\t\t\t<\/li>\r\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\r\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/philips-hue-white-ambiance-e27-3er-starter-set-inkl-smart-button-dimmbar-alle-weissschattierungen-steuerbar-via-app-kompatibel-mit-amazon-alexa-echo-echo\/\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/61pZ0xD9KGL._AC_SL1500_-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\r\n\t\t\t\t\t\t\r\n\t\t\t\t\t\t<span class=\"deals-top__body\">\r\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Philips Hue White Ambiance E27 3er Starter Set inkl. Smart Button, dimmbar, alle Wei\u00dfschattierungen, steuerbar via App, kompatibel mit Amazon Alexa (Echo, Echo\u2026<\/span>\r\n\r\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">77.99 \u20ac<\/span>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>129.99 \u20ac<\/s>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-40%<\/span>\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t\t<\/span>\r\n\r\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\r\n\t\t\t\t\t\t\t0\u00b0\r\n\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t<\/a>\r\n\t\t\t\t<\/li>\r\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\r\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/philips-hue-e27-filament-grosse-edison-lampe-white-ambiance-alle-weisstoene-550-lm-dimmbar-leuchtmittel-fuer-das-hue-lichtsystem-app-und-sprachsteuerung-s\/\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/61UiXJLhChL._AC_SL1500_-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\r\n\t\t\t\t\t\t\r\n\t\t\t\t\t\t<span class=\"deals-top__body\">\r\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Philips Hue E27 Filament Gro\u00dfe Edison Lampe | White Ambiance, Alle Wei\u00dft\u00f6ne, 550 lm, Dimmbar, Leuchtmittel f\u00fcr das Hue Lichtsystem, App- und Sprachsteuerung, S\u2026<\/span>\r\n\r\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">29.99 \u20ac<\/span>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>39.90 \u20ac<\/s>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-25%<\/span>\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t\t<\/span>\r\n\r\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\r\n\t\t\t\t\t\t\t0\u00b0\r\n\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t<\/a>\r\n\t\t\t\t<\/li>\r\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\r\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/ninja-foodi-max-dual-zone-heissluftfritteuse-95l-airfryer-2-faecher-mit-zange-antihaftbeschichtung-spuelmaschinenfeste-koerbe-6-in-1-amazon-exklusiv-kupfe\/\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/61FZ31gLeL._AC_SL1400_-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\r\n\t\t\t\t\t\t\r\n\t\t\t\t\t\t<span class=\"deals-top__body\">\r\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Ninja Foodi MAX Dual Zone Hei\u00dfluftfritteuse, 9,5L Airfryer, 2 F\u00e4cher, mit Zange, Antihaftbeschichtung, sp\u00fclmaschinenfeste K\u00f6rbe, 6-in-1, Amazon Exklusiv, Kupfe\u2026<\/span>\r\n\r\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">149.99 \u20ac<\/span>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>172.47 \u20ac<\/s>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-13%<\/span>\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t\t<\/span>\r\n\r\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\r\n\t\t\t\t\t\t\t0\u00b0\r\n\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t<\/a>\r\n\t\t\t\t<\/li>\r\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\r\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/samsung-galaxy-book4-edge-ai-laptop-156-zoll-display-16gb-ram-snapdragon-x-plus-prozessor-notebook-512gb-speicher-copilot-pc-sapphire-blue-3-jahre-her\/\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/41HJCRoes1L-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\r\n\t\t\t\t\t\t\r\n\t\t\t\t\t\t<span class=\"deals-top__body\">\r\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Samsung Galaxy Book4 Edge AI-Laptop, 15,6-Zoll-Display, 16GB RAM, Snapdragon X Plus Prozessor, Notebook 512GB Speicher, Copilot+ PC, Sapphire Blue, 3 Jahre Her\u2026<\/span>\r\n\r\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">579.00 \u20ac<\/span>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>967.97 \u20ac<\/s>\r\n\t\t\t\t\t\t\t\t\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-40%<\/span>\r\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t\t<\/span>\r\n\r\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\r\n\t\t\t\t\t\t\t0\u00b0\r\n\t\t\t\t\t\t<\/span>\r\n\t\t\t\t\t<\/a>\r\n\t\t\t\t<\/li>\r\n\t\t\t\t\t<\/ul>\r\n\r\n\t\t\t\t\t<p class=\"deals-top__more\">\r\n\t\t\t\t<a href=\"https:\/\/netguide.io\/deals\/\">Alle Deals ansehen \u2192<\/a>\r\n\t\t\t<\/p>\r\n\t\t\t<\/aside>\r\n<\/div>\n\n<h3 class=\"wp-block-heading\">Betroffene und gepatchte Versionen<\/h3>\n\n<ul class=\"wp-block-list\"><li><strong>Betroffen:<\/strong> SMA-1000-Modelle 6210, 7210 und 8200v mit Firmware 12.4.3-03453 bzw. 12.5.0-02835 und \u00e4lter<\/li><li><strong>Gepatcht:<\/strong> Hotfix 12.4.3-03526 bzw. 12.5.0-02952 und h\u00f6her<\/li><li>Nicht betroffen: SMA-100-Serie sowie SSL-VPN auf SonicWall-Firewalls<\/li><li><strong>To-do:<\/strong> Sofort auf die Hotfix-Version aktualisieren, AMC-Zugang vom Internet abschotten, Logs auf Kompromittierung pr\u00fcfen<\/li><\/ul>\n\n<h3 class=\"wp-block-heading\">Aktive Ausnutzung best\u00e4tigt<\/h3>\n\n<p class=\"wp-block-paragraph\">Das SonicWall PSIRT gibt an, einen Fall aktiver Ausnutzung untersucht zu haben, und dr\u00e4ngt Kunden zum sofortigen Update. Die CISA hat beide CVEs am 3. September 2026 in ihren Known-Exploited-Vulnerabilities-Katalog aufgenommen. Wichtig: Der Vorfall ist nicht identisch mit dem \u00e4lteren Juli-Fall (CVE-2026-15409\/15410). Da SonicWall keine Kompromittierungsindikatoren (IoCs) ver\u00f6ffentlicht hat, sollten Betreiber nach dem Update von einer m\u00f6glichen Vorab-Kompromittierung ausgehen und Zugangsdaten sowie Sitzungen zur\u00fccksetzen.<\/p>\n\n<p class=\"wp-block-paragraph\"><strong>Quellen:<\/strong> <a href=\"https:\/\/psirt.global.sonicwall.com\/vuln-detail\/SNWLID-2026-0016\" target=\"_blank\" rel=\"noopener\">SonicWall PSIRT (SNWLID-2026-0016)<\/a> \u00b7 <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/sonicwall-warns-of-actively-exploited-sma1000-zero-day-flaws\/\" target=\"_blank\" rel=\"noopener\">BleepingComputer<\/a> \u00b7 <a href=\"https:\/\/thehackernews.com\/2026\/09\/attackers-exploit-two-sonicwall-sma.html\" target=\"_blank\" rel=\"noopener\">The Hacker News<\/a> \u00b7 <a href=\"https:\/\/www.securityweek.com\/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks\/\" target=\"_blank\" rel=\"noopener\">SecurityWeek<\/a><\/p><div id=\"netgu-3898659613\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>SonicWall warnt vor zwei Schwachstellen in SMA-1000-Appliances, die verkettet unauthentifizierte Codeausf\u00fchrung erlauben. Der Hersteller best\u00e4tigt aktive Angriffe \u2013 Patchen ist dringend.<\/p>\n","protected":false},"author":1,"featured_media":1722,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-2397","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/2397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=2397"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/2397\/revisions"}],"predecessor-version":[{"id":2432,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/2397\/revisions\/2432"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1722"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=2397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=2397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=2397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}