Vendor
SonicWall
221 known vulnerabilities.
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
60 results · Clear filters · Feed
-
High 7.5
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an al…
KEV Nov 6, 2026 -
High 7.5
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…
-
High 8.8
A session validation vulnerability has been identified in the SonicOS management interface, which in specific condition…
-
High 8.8
A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specif…
-
High 7.2
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
-
High 8.8
An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in…
-
High 7.2CVE-2026-102257 Public exploit
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extra…
-
High 7.8CVE-2026-102256 Public exploit
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
-
High 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…
KEV Sep 2, 2026 -
High 7.0
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allow…
-
High 8.8
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to…
-
High 7.8
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allow…
-
High 7.8
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allow…
-
High 8.4
An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (…
-
High 8.3
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.…
-
High 7.2
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the …
KEV Jul 14, 2026 -
High 8.0
A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be acces…
-
High 7.2
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user …
-
High 7.2
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to…
-
High 7.2CVE-2026-4112 Public exploit
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series applia…
-
High 7.5
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to c…
-
High 7.5CVE-2025-40597 EPSS 23%
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker t…
-
High 7.3CVE-2025-40596 EPSS 45%
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker …
-
High 7.2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. B…
-
High 7.1CVE-2025-32821 EPSS 23%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges…
-
High 8.3
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversa…
-
High 8.8
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path travers…
-
High 7.2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, w…
-
High 7.5
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticate…
-
High 7.2
An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 an…
-
High 7.2
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an atta…
-
High 7.2
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded b…
-
High 8.1
A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause Stack-based bu…
-
High 7.5
Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy. This allows remote au…