Security

SonicWall reports exploited SMA1000 zero-days and releases fixes

SonicWall reports exploited SMA1000 zero-days and releases fixes Image: Primary
SecurityWeek reported that SonicWall urged SMA1000 customers to patch two zero-day vulnerabilities the vendor says have been exploited. CVE-2026-83548 is a pre-authentication SSRF flaw in the Appliance Work Place interface that can allow remote access to sensitive functionality, while CVE-2026-83549 is an authenticated command-injection flaw in the Appliance Management Console. SonicWall said exploitation suggests the flaws have been chained. SMA1000 6210, 7210 and 8200v models are affected; specified hotfixes and later releases address them.
Sources
SecurityWeek
Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Security AI
Security AI

Langflow flaw is being exploited to harvest cloud and AI credentials

Threat actors are exploiting CVE-2026-0768, an unauthenticated remote-code-execution flaw in Langflow's custom-component code validator, to steal credentials, tokens and keys, according to VulnCheck observations reported by Bleepi...

BleepingComputer
Security
Security

Attackers exploit Artifactory authentication-bypass flaw

Threat actors began exploiting CVE-2026-82329 in JFrog Artifactory on September 1, according to watchTowr. The critical authentication-bypass flaw can allow an unauthenticated network attacker to obtain administrative privileges u...

The Hacker News
AI Security
AI Security

OpenAI says Astra reached its critical cyber-capability threshold

OpenAI says its forthcoming Astra model has reached the company's threshold for critical cyber capabilities, defined as independently finding and exploiting previously unknown vulnerabilities in real-world software. The company p...

WIRED