[ Vendor · 25 CVEs ]
SonicWall
CVEs affecting SonicWall published in the last 30 days, plus any SonicWall CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96540 | 14 Oct 2026 | CVSS 8.8 | SonicWall Network Security Manager (NSM)An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially… | Fix |
| CVE-2026-100232 | 14 Oct 2026 | CVSS 7.2 | SonicWall Network Security Manager (NSM)Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in… | Fix |
| CVE-2026-102257 | 7 Oct 2026 | CVSS 7.2 | SonicWall SMA1000A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended… | Fix |
| CVE-2026-102258 | 7 Oct 2026 | CVSS 6.1 | SonicWall SMA1000Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in… | Fix |
| CVE-2026-102255 | 7 Oct 2026 | CVSS 10.0 | SonicWall SMA1000A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing… | Fix |
| CVE-2026-102256 | 7 Oct 2026 | CVSS 7.8 | SonicWall SMA1000Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in… | Fix |
| CVE-2026-83548 | 1 Sep 2026 | CVSS 10.0 | SonicWall SMA1000 Appliances Server-Side Request ForgeryA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote… | ExploitedFix |
| CVE-2026-83549 | 1 Sep 2026 | CVSS 7.8 | SonicWall SMA1000 Appliances OS Command InjectionPost-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in… | ExploitedFix |
| CVE-2026-15409 | 14 Jul 2026 | CVSS 10.0 | SonicWall SMA1000 Appliances Server-Side Request ForgeryA Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated… | Exploited |
| CVE-2026-15410 | 14 Jul 2026 | CVSS 7.2 | SonicWall SMA1000 Appliances Code InjectionPost-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management… | Exploited |
| CVE-2025-40602 | 18 Dec 2025 | CVSS 6.6 | SonicWall SMA1000 Missing AuthorizationA local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | Exploited |
| CVE-2025-23006 | 23 Jan 2025 | CVSS 9.8 | SonicWall SMA1000 Appliances DeserializationPre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central… | Exploited |
| CVE-2024-53704 | 9 Jan 2025 | CVSS 9.8 | SonicWall SonicOS SSLVPN Improper AuthenticationAn Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | Exploited |
| CVE-2024-40766 | 23 Aug 2024 | CVSS 9.8 | SonicWall SonicOS Improper Access ControlAn improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource… | Exploited |
| CVE-2023-44221 | 5 Dec 2023 | CVSS 7.2 | SonicWall SMA100 Appliances OS Command InjectionImproper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative… | Exploited |
| CVE-2021-20038 | 8 Dec 2021 | CVSS 9.8 | SonicWall SMA 100 Appliances Stack-Based Buffer OverflowA Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated… | Exploited |
| CVE-2021-20035 | 27 Sep 2021 | CVSS 6.5 | SonicWall SMA100 Appliances OS Command InjectionImproper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as… | Exploited |
| CVE-2021-20028 | 4 Aug 2021 | CVSS 9.8 | SonicWall Secure Remote Access (SRA) SQL InjectionImproper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products… | Exploited |
| CVE-2021-20023 | 20 Apr 2021 | CVSS 4.9 | SonicWall Email Security Path TraversalSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote… | Exploited |
| CVE-2021-20021 | 9 Apr 2021 | CVSS 9.8 | SonicWall Email Security Improper Privilege ManagementA vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP… | Exploited |
| CVE-2021-20022 | 9 Apr 2021 | CVSS 7.2 | SonicWall Email Security Unrestricted Upload of FileSonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the… | Exploited |
| CVE-2021-20016 | 4 Feb 2021 | CVSS 9.8 | SonicWall SSLVPN SMA100 SQL InjectionA SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username… | Exploited |
| CVE-2020-5135 | 12 Oct 2020 | CVSS 9.8 | SonicWall SonicOS Buffer OverflowA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by… | Exploited |
| CVE-2019-7483 | 19 Dec 2019 | CVSS 7.5 | SonicWall SMA100 Directory TraversalIn SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a… | Exploited |
| CVE-2019-7481 | 17 Dec 2019 | CVSS 7.5 | SonicWall SMA100 SQL InjectionVulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100… | Exploited |