Vendor

SonicWall

221 known vulnerabilities.

Products

SonicOS 75 SMA100 26 GMS 24 SMA1000 19 Analytics 15 NetExtender 11 SonicWall SMA100 11 Email Security 11 SonicWall Global VPN Client 5 SonicOSv 5 Network Security Manager (NSM) 5 Global Management System (GMS) 5 SMA 100 Series 4 SonicWall SMA1000 4 Connect Tunnel 3 SonicWall SRA/SMA100 3 SonicWall Switch 2 SonicWall Analytics On-Prem 2 SonicWall NetExtender 2 Directory Services Connector 2 Email Security Appliance 2 SonicWall GMS 2 SonicWall Email Security 2 SonicWall NetExtender Windows (32 and 64 bit) Client 1 Capture Client 1 SonicWall NSM On-Prem 1 Global VPN Client 1 Email Security Virtual Appliance 1 GMS < 9.3.3 0 SMA 1000 Series Firmware 0 SMA 0 SMA Mobile Connect 0 SMA Connect Tunnel 0 SMA NetExtender 0 SMA 1000 0 SMA 100 0 sma100_firmware 0 sonicwall_sonicos__5.9.2.14-13o 0 sonicwall_sonicos__6.5.2.8-2n 0 sonicwall_sonicos__6.5.4.15.116n 0

All Critical High Medium Low Exploited only Public exploit

24 results · Clear filters · Feed

Critical 9.1

CVE-2026-109593

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read int…

SonicWall Global Management System (GMS) Network devices

Nov 3, 2026
Critical 10.0

CVE-2026-102255 Public exploit

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

SonicWall SMA1000 Network devices

Oct 7, 2026
Critical 9.1

CVE-2026-81939

A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing fun…

SonicWall Network Security Manager (NSM) Network devices

Sep 4, 2026
Critical 9.1

CVE-2026-78328

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allo…

SonicWall Network Security Manager (NSM) Network devices

Sep 4, 2026
Critical 9.1

CVE-2026-78327

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Soni…

SonicWall Network Security Manager (NSM) Network devices

Sep 4, 2026
Critical 10.0

CVE-2026-83548 Exploited Public exploit Scanner template

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

SonicWall SMA1000 Network devices

Sep 1, 2026
KEV Sep 2, 2026
Critical 9.4

CVE-2026-66147

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlie…

SonicWall GMS Network devices

Aug 11, 2026
Critical 9.1

CVE-2026-66145

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versio…

SonicWall GMS Network devices

Aug 11, 2026
Critical 10.0

CVE-2026-15409 Exploited · Ransomware Public exploit Scanner template

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

SonicWall SMA1000 Network devices

Jul 14, 2026
KEV Jul 14, 2026
Critical 9.8

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…

SonicWall SonicOS Network devices

Jul 29, 2025
Critical 9.1

CVE-2025-40599

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote at…

SonicWall SMA 100 Series Network devices

Jul 23, 2025
Critical 9.8

CVE-2025-23006 Exploited · Ransomware EPSS 27%

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

SonicWall SMA1000 Network devices

Jan 23, 2025
KEV Jan 24, 2025
Critical 9.1

CVE-2024-12802

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal…

SonicWall SonicOS Network devices

Jan 9, 2025
Critical 9.8

CVE-2024-40765

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…

SonicWall SonicOS Network devices

Jan 9, 2025
Critical 9.8

CVE-2024-40762

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generato…

SonicWall SonicOS Network devices

Jan 9, 2025
Critical 9.3

CVE-2024-40766 Exploited · Ransomware EPSS 18%

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

SonicWall SonicOS Network devices

Aug 23, 2024
KEV Sep 9, 2024
Critical 9.8

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific co…

SonicWall SonicOS Network devices

Feb 8, 2024
Critical 9.8

CVE-2023-34124 Public exploit Scanner template EPSS 50%

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…

SonicWall GMS Analytics Network devices

Jul 13, 2023
Critical 9.8

CVE-2021-20038 Exploited · Ransomware Public exploit Scanner template EPSS 100%

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

SonicWall SonicWall SMA100 Network devices

Dec 8, 2021
KEV Jan 28, 2022
Critical 9.8

CVE-2021-20028 Exploited · Ransomware EPSS 30%

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acc…

SonicWall SonicWall SRA/SMA100 Network devices

Aug 4, 2021
KEV Mar 28, 2022
Critical 9.8

CVE-2021-20021 Exploited · Ransomware Public exploit Scanner template EPSS 89%

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

SonicWall Email Security Network devices

Apr 9, 2021
KEV Nov 3, 2021
Critical 9.8

CVE-2021-20016 Exploited · Ransomware EPSS 40%

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

SonicWall SonicWall SMA100 Network devices

Feb 3, 2021
KEV Nov 3, 2021
Critical 9.8

CVE-2020-5135 Exploited · Ransomware EPSS 27%

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

SonicWall SonicOS Network devices

Oct 12, 2020
KEV Mar 15, 2022
Critical 9.8

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management …

SonicWall Global Management System (GMS) Network devices

Aug 3, 2018

SonicWall

Products

An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read int…

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing fun…

A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allo…

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Soni…

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlie…

An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versio…

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…

An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote at…

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal…

An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generato…

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific co…

The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…

A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acc…

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management …