CVE-2026-83549
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — probability of exploitation (30 days)
8.5%
94.8th percentile
CISA KEV
Listed
Added 2026-09-02 · patch by 2026-09-05
Weakness / dates
CWE-78
Published 2026-09-01 · modified 2026-09-03
CVSS breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | L | Local |
| Attack Complexity | L | Low |
| Privileges Required | L | Low |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | H | High |
| Integrity | H | High |
| Availability | H | High |
Timeline
- 2026-09-01 — Published (NVD)
- 2026-09-02 — Added to CISA KEV (actively exploited)
- 2026-09-05 — CISA patch-by deadline
- 2026-09-03 — Last modified (NVD)
Description
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.