Vendor
SonicWall
221 known vulnerabilities.
SonicWall at a glance
13 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 9 | 1 |
| Oct 2026 | 6 | 1 |
| Sep 2026 | 5 | 4 |
| Aug 2026 | 12 | 2 |
| Jul 2026 | 2 | 1 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 7 | 0 |
| Mar 2026 | 4 | 0 |
| Feb 2026 | 4 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 1 | 0 |
| Nov 2025 | 3 | 0 |
| Oct 2025 | 1 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 5 | 2 |
| Jun 2025 | 0 | 0 |
| May 2025 | 4 | 0 |
| Apr 2025 | 6 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 11 | 4 |
| Dec 2024 | 5 | 0 |
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
Latest advisories
-
High max 9.8
Apache HTTP Server: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HTTP Server ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.
first Jul 1, 2024 -
High max 8.8
Kwetsbaarheden verholpen in SonicOS van SonicWall
SonicWall heeft zeven kwetsbaarheden verholpen in SonicOS voor Gen7- en Gen8-firewalls.
-
High max 8.8
SonicWall SonicOS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall SonicOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Zustand auszulösen.
-
Critical max 10.0
SonicWall SMA1000: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall SMA1000 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen, beliebigen Code auszuführen und Cross-Site-Scripting-Angriffe durchzuführen.
first Oct 6, 2026 -
High max 9.1WID-SEC-2026-4354 2 CVEs
SonicWall GMS: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in SonicWall GMS ausnutzen, um Informationen offenzulegen und SQL-Injection-Angriffe durchzuführen.
221 results · Feed
-
Medium 5.1
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions c…
-
Medium 5.9
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
-
Medium 5.9
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authenticatio…
-
High 7.5
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…
KEV Nov 6, 2026 -
High 7.5
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…
-
High 8.8
A session validation vulnerability has been identified in the SonicOS management interface, which in specific condition…
-
High 8.8
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specif…
-
Medium 6.8
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability …
-
Critical 9.1
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read int…
-
High 7.2
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
-
High 8.8
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in…
-
Medium 6.1CVE-2026-102258 Public exploit
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Manage…
-
High 7.2CVE-2026-102257 Public exploit
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extra…
-
High 7.8CVE-2026-102256 Public exploit
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
-
Critical 10.0CVE-2026-102255 Public exploit
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…
-
Critical 9.1
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing fun…
-
Critical 9.1
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allo…
-
Critical 9.1
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Soni…
-
High 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
KEV Sep 2, 2026 -
Critical 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…
KEV Sep 2, 2026 -
High 7.0
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allow…
-
High 8.8
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to…
-
High 7.8
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allow…
-
High 7.8
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allow…
-
High 8.4
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (…
-
High 8.3
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.…
-
Medium 6.3
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1…
-
Critical 9.4
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlie…
-
Medium 6.1
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions…
-
Critical 9.1
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versio…
-
Medium 5.5
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the…
-
Medium 6.5
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker t…
-
High 7.2
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the …
KEV Jul 14, 2026 -
Critical 10.0
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…
KEV Jul 14, 2026 -
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewa…
-
Medium 6.8
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted se…
-
High 8.0
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be acces…
-
High 7.2
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user …
-
Medium 6.6
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin…
-
High 7.2
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to…