decrypted · 3 september 2026 · vulnerabilities and patching · supply chain · ai and llm security

SonicWall's remote access gateway is compromised for a third time in under a year

SonicWall's SMA1000 remote access appliances are being actively exploited for the third time in under a year, and this time the two flaws chain together into unauthenticated remote code execution on boxes that sit at the edge of corporate networks by design. SonicWall confirmed exploitation on 2 September, the vulnerabilities went straight into CISA's Known Exploited Vulnerabilities catalogue the same day, and the pattern is now impossible to ignore.

What went wrong, in plain terms

Think of the SMA1000 as a building's front desk that also happens to hold the master keys. CVE-2026-83548, scoring the maximum 10.0 on CVSS, is a pre-authentication server-side request forgery in the appliance's Work Place portal: anyone on the internet can make the front desk place a call on their behalf, no ID required. CVE-2026-83549 is a command injection flaw in the Appliance Management Console, the back-office system that actually runs the building, and on its own needs an admin login. Chained together, attackers use the unauthenticated flaw to reach the console and the injection flaw to run their own commands on it, turning a front-desk trick into full control of the appliance.

Patching is not the same as remediation

This is SonicWall's third SMA1000 incident in under a year, following a zero-day in late 2025 and another pair of flaws in July that let attackers steal the appliance's MFA seed configurations, the secrets behind every one-time passcode it issues. Those stolen seeds kept generating valid codes for attackers even after July's patch went in, because a patch closes the hole an attacker came through, it does not undo what they took while it was open. NHS England's cyber security operations centre flagged the July incident as one where compromise required a full re-image and a reset of every password and TOTP token, not just an update.

The design lesson for UK organisations is specific: when a single internet-facing box holds both the front door and the keys to everything behind it, a vulnerability in that box is never just a vulnerability, it is a standing offer to whoever finds it next. Secure by Design here means separating the exposed authentication surface from the administrative and credential-issuing functions, so that compromising one does not hand over the other. If your organisation runs SMA1000 appliances, the September hotfixes are necessary but insufficient on their own: check the logs SonicWall has named, extraweb_access.log and ctrl-service.log, and treat any hit as a full incident, not a patching ticket.

Also this week

JFrog's Artifactory, the repository manager that sits behind many UK software build pipelines, had a critical authentication bypass (CVE-2026-82329, patched 28 August) under active exploitation within days of disclosure. Researchers at watchTowr caught attackers minting themselves administrator tokens on self-hosted instances left in their default configuration, giving them the ability to tamper with builds and potentially slip malicious code into anything the repository distributes downstream. JFrog's own cloud instances were already fixed; anyone self-hosting Artifactory needs to check they are not still running last month's version.

Separately, an authentication bypass in LiteLLM, the open-source gateway many companies use to connect large language models to internal tools, let unauthenticated attackers fabricate a bearer token and reach connected services through the Model Context Protocol without ever holding a real credential. It is a reminder that the access-control layer sitting between an AI model and the tools it can call is now as security-critical as any API gateway, and needs the same scrutiny, not a pass because it is new.

Sources

If you want to talk through what Secure by Design means for your own edge devices and supplier stack, get in touch.

More like this

Get the next post by email: subscribe to Decrypted. Double opt-in, unsubscribe any time, or take the RSS feed.

Prefer to listen? Decrypted on Apple Podcasts, or paste the podcast feed into any app.