Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
TLP:WHITE4 IOCs
CVE-2026-83548 and CVE-2026-83549: SonicWall SMA 1000 Zero-Days Exploited in the Wild
Diamond Model
Indicators of Compromise
Indicators of Compromise4
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-83548 exploitintel-blogmalware | High | 66 | Sep 2, 26 |
| CVE | CVE-2026-83549 exploitintel-blogmalware | High | 66 | Sep 2, 26 |
| CVE | CVE-2026-15410 exploitintel-blogmalware | High | 73 | Jul 16, 26 |
| CVE | CVE-2026-15409 aptespionageexploit | High | 75 | Jul 16, 26 |
IOC Relationship Graph
IOC Relationship Graph4 total IOCs
CVE