Skip to content
OpenAdvisories

Vendor

SonicWall

221 known vulnerabilities.

Products

SonicOS 75 SMA100 26 GMS 24 SMA1000 19 Analytics 15 NetExtender 11 SonicWall SMA100 11 Email Security 11 SonicWall Global VPN Client 5 SonicOSv 5 Network Security Manager (NSM) 5 Global Management System (GMS) 5 SMA 100 Series 4 SonicWall SMA1000 4 Connect Tunnel 3 SonicWall SRA/SMA100 3 SonicWall Switch 2 SonicWall Analytics On-Prem 2 SonicWall NetExtender 2 Directory Services Connector 2 Email Security Appliance 2 SonicWall GMS 2 SonicWall Email Security 2 SonicWall NetExtender Windows (32 and 64 bit) Client 1 Capture Client 1 SonicWall NSM On-Prem 1 Global VPN Client 1 Email Security Virtual Appliance 1 GMS < 9.3.3 0 SMA 1000 Series Firmware 0 SMA 0 SMA Mobile Connect 0 SMA Connect Tunnel 0 SMA NetExtender 0 SMA 1000 0 SMA 100 0 sma100_firmware 0 sonicwall_sonicos__5.9.2.14-13o 0 sonicwall_sonicos__6.5.2.8-2n 0 sonicwall_sonicos__6.5.4.15.116n 0
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • High 7.5
    CVE-2026-19868 Exploited Public exploit

    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…

    SonicWall SonicOS Network devices
    KEV Nov 6, 2026
  • High 7.8
    CVE-2026-83549 Exploited Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • High 7.2
    CVE-2026-15410 Exploited · Ransomware Public exploit EPSS 12%

    Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the …

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Critical 10.0
    CVE-2026-15409 Exploited · Ransomware Public exploit

    A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Medium 6.6
    CVE-2025-40602 Exploited Public exploit

    A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…

    SonicWall SMA1000 Network devices
    KEV Dec 17, 2025
  • Critical 9.8
    CVE-2025-23006 Exploited · Ransomware EPSS 27%

    Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…

    SonicWall SMA1000 Network devices
    KEV Jan 24, 2025
  • High 8.2
    CVE-2024-53704 Exploited · Ransomware Public exploit EPSS 95%

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…

    SonicWall SonicOS Network devices
    KEV Feb 18, 2025
  • Critical 9.3
    CVE-2024-40766 Exploited · Ransomware EPSS 18%

    An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially le…

    SonicWall SonicOS Network devices
    KEV Sep 9, 2024
  • High 7.2
    CVE-2023-44221 Exploited EPSS 76%

    Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…

    SonicWall SMA100 Network devices
    KEV May 1, 2025
  • Critical 9.8
    CVE-2021-20038 Exploited · Ransomware Public exploit EPSS 100%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

    SonicWall SonicWall SMA100 Network devices
    KEV Jan 28, 2022
  • Medium 6.5
    CVE-2021-20035 Exploited

    Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker t…

    SonicWall SMA100 Network devices
    KEV Apr 16, 2025
  • Critical 9.8
    CVE-2021-20028 Exploited · Ransomware EPSS 30%

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Acc…

    SonicWall SonicWall SRA/SMA100 Network devices
    KEV Mar 28, 2022
  • Medium 4.9
    CVE-2021-20023 Exploited · Ransomware EPSS 52%

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…

    SonicWall Email Security Network devices
    KEV Nov 3, 2021
  • High 7.2
    CVE-2021-20022 Exploited · Ransomware EPSS 17%

    SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload …

    SonicWall Email Security Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-20021 Exploited · Ransomware Public exploit EPSS 89%

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

    SonicWall Email Security Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2021-20016 Exploited · Ransomware EPSS 40%

    A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perfor…

    SonicWall SonicWall SMA100 Network devices
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-5135 Exploited · Ransomware EPSS 27%

    A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially ex…

    SonicWall SonicOS Network devices
    KEV Mar 15, 2022
  • High 7.5
    CVE-2019-7483 Exploited

    In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user …

    SonicWall SMA100 Network devices
    KEV Mar 28, 2022
  • High 7.5
    CVE-2019-7481 Exploited · Ransomware EPSS 100%

    Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This v…

    SonicWall SMA100 Network devices
    KEV Nov 3, 2021