Skip to content
OpenAdvisories

Vendor

SonicWall

221 known vulnerabilities.

Products

SonicOS 75 SMA100 26 GMS 24 SMA1000 19 Analytics 15 NetExtender 11 SonicWall SMA100 11 Email Security 11 SonicWall Global VPN Client 5 SonicOSv 5 Network Security Manager (NSM) 5 Global Management System (GMS) 5 SMA 100 Series 4 SonicWall SMA1000 4 Connect Tunnel 3 SonicWall SRA/SMA100 3 SonicWall Switch 2 SonicWall Analytics On-Prem 2 SonicWall NetExtender 2 Directory Services Connector 2 Email Security Appliance 2 SonicWall GMS 2 SonicWall Email Security 2 SonicWall NetExtender Windows (32 and 64 bit) Client 1 Capture Client 1 SonicWall NSM On-Prem 1 Global VPN Client 1 Email Security Virtual Appliance 1 GMS < 9.3.3 0 SMA 1000 Series Firmware 0 SMA 0 SMA Mobile Connect 0 SMA Connect Tunnel 0 SMA NetExtender 0 SMA 1000 0 SMA 100 0 sma100_firmware 0 sonicwall_sonicos__5.9.2.14-13o 0 sonicwall_sonicos__6.5.2.8-2n 0 sonicwall_sonicos__6.5.4.15.116n 0
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit Scanner template

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-15409 Exploited · Ransomware Public exploit Scanner template

    A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Critical 9.8
    CVE-2025-23006 Exploited · Ransomware EPSS 27%

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

    SonicWall SMA1000 Network devices
    KEV Jan 24, 2025
  • Critical 9.3
    CVE-2024-40766 Exploited · Ransomware EPSS 18%

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

    SonicWall SonicOS Network devices
    KEV Sep 9, 2024
  • Critical 9.8
    CVE-2021-20038 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

    SonicWall SonicWall SMA100 Network devices
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2021-20028 Exploited · Ransomware EPSS 30%

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acc…

    SonicWall SonicWall SRA/SMA100 Network devices
    KEV Mar 28, 2022
  • Critical 9.8
    CVE-2021-20021 Exploited · Ransomware Public exploit Scanner template EPSS 89%

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

    SonicWall Email Security Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-20016 Exploited · Ransomware EPSS 40%

    A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

    SonicWall SonicWall SMA100 Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-5135 Exploited · Ransomware EPSS 27%

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

    SonicWall SonicOS Network devices
    KEV Mar 15, 2022