Skip to content
OpenAdvisories

Vendor

SonicWall

221 known vulnerabilities.

Products

SonicOS 75 SMA100 26 GMS 24 SMA1000 19 Analytics 15 NetExtender 11 SonicWall SMA100 11 Email Security 11 SonicWall Global VPN Client 5 SonicOSv 5 Network Security Manager (NSM) 5 Global Management System (GMS) 5 SMA 100 Series 4 SonicWall SMA1000 4 Connect Tunnel 3 SonicWall SRA/SMA100 3 SonicWall Switch 2 SonicWall Analytics On-Prem 2 SonicWall NetExtender 2 Directory Services Connector 2 Email Security Appliance 2 SonicWall GMS 2 SonicWall Email Security 2 SonicWall NetExtender Windows (32 and 64 bit) Client 1 Capture Client 1 SonicWall NSM On-Prem 1 Global VPN Client 1 Email Security Virtual Appliance 1 GMS < 9.3.3 0 SMA 1000 Series Firmware 0 SMA 0 SMA Mobile Connect 0 SMA Connect Tunnel 0 SMA NetExtender 0 SMA 1000 0 SMA 100 0 sma100_firmware 0 sonicwall_sonicos__5.9.2.14-13o 0 sonicwall_sonicos__6.5.2.8-2n 0 sonicwall_sonicos__6.5.4.15.116n 0
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2026-19868 Exploited Public exploit

    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…

    SonicWall SonicOS Network devices
    KEV Nov 6, 2026
  • High 7.8
    CVE-2026-83549 Exploited Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • High 7.2
    CVE-2026-15410 Exploited · Ransomware Public exploit EPSS 12%

    Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the …

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Critical 10.0
    CVE-2026-15409 Exploited · Ransomware Public exploit

    A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A…

    SonicWall SMA1000 Network devices
    KEV Jul 14, 2026
  • Medium 6.6
    CVE-2025-40602 Exploited Public exploit

    A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…

    SonicWall SMA1000 Network devices
    KEV Dec 17, 2025
  • High 8.2
    CVE-2024-53704 Exploited · Ransomware Public exploit EPSS 95%

    An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…

    SonicWall SonicOS Network devices
    KEV Feb 18, 2025
  • Critical 9.8
    CVE-2021-20038 Exploited · Ransomware Public exploit EPSS 100%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

    SonicWall SonicWall SMA100 Network devices
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2021-20021 Exploited · Ransomware Public exploit EPSS 89%

    A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account…

    SonicWall Email Security Network devices
    KEV Nov 3, 2021