Vendor
SonicWall
221 known vulnerabilities.
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
38 results · Clear filters · Feed
-
Medium 5.1
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions c…
-
Medium 5.9
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…
-
Medium 5.9
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authenticatio…
-
Medium 6.8
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability …
-
Medium 6.1CVE-2026-102258 Public exploit
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Manage…
-
Medium 6.3
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1…
-
Medium 6.1
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions…
-
Medium 5.5
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the…
-
Medium 6.5
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker t…
-
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewa…
-
Medium 6.8
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted se…
-
Medium 6.6
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin…
-
Medium 4.8
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to …
-
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacke…
-
Medium 4.9
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to imp…
-
Medium 6.6
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…
KEV Dec 17, 2025 -
Medium 5.3
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate fil…
-
Medium 6.5
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem …
-
Medium 4.5
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, au…
-
Medium 6.1CVE-2025-40598 EPSS 46%
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unaut…
-
Medium 6.1
A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this …
-
Medium 5.5
A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows s…
-
Medium 4.9
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an a…
-
Medium 5.3
Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup…
-
Medium 6.3
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remote authenticat…
-
Medium 5.5
The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 1…
-
Medium 5.3
Heap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote attacker to cause Denial…
-
Medium 4.9
Stack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated remote attacker to cause D…
-
Medium 4.9
An improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in SonicWall Email Securi…
-
Medium 5.3
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
Medium 6.3
Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office portal, which in specifi…
-
Medium 5.5
SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sf…
-
Medium 5.3
SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an erro…
-
Medium 6.5CVE-2021-20035 Exploited
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker t…
KEV Apr 16, 2025 -
Medium 4.9
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an…
KEV Nov 3, 2021