Miscreants use chained zero days to pwn boxen as third-party SOCs say further attacks 'almost certain'

SonicWall SMA1000 vulnerabilities CVE-2026-83549 and CVE-2026-83548, which allow remote code execution, are being exploited in attacks.

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks.