Vendor
SonicWall
221 known vulnerabilities.
Products
SonicOS 75
SMA100 26
GMS 24
SMA1000 19
Analytics 15
NetExtender 11
SonicWall SMA100 11
Email Security 11
SonicWall Global VPN Client 5
SonicOSv 5
Network Security Manager (NSM) 5
Global Management System (GMS) 5
SMA 100 Series 4
SonicWall SMA1000 4
Connect Tunnel 3
SonicWall SRA/SMA100 3
SonicWall Switch 2
SonicWall Analytics On-Prem 2
SonicWall NetExtender 2
Directory Services Connector 2
Email Security Appliance 2
SonicWall GMS 2
SonicWall Email Security 2
SonicWall NetExtender Windows (32 and 64 bit) Client 1
Capture Client 1
SonicWall NSM On-Prem 1
Global VPN Client 1
Email Security Virtual Appliance 1
GMS < 9.3.3 0
SMA 1000 Series Firmware 0
SMA 0
SMA Mobile Connect 0
SMA Connect Tunnel 0
SMA NetExtender 0
SMA 1000 0
SMA 100 0
sma100_firmware 0
sonicwall_sonicos__5.9.2.14-13o 0
sonicwall_sonicos__6.5.2.8-2n 0
sonicwall_sonicos__6.5.4.15.116n 0
221 results · Feed
-
High 7.2CVE-2026-4112 Public exploit
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series applia…
-
Low 3.8
A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to da…
-
Low 2.7
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security applian…
-
Medium 4.8
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to …
-
Medium 4.9
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacke…
-
Medium 4.9
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
-
Medium 4.9
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to imp…
-
Medium 6.6
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance managem…
KEV Dec 17, 2025 -
High 7.5
A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to c…
-
Medium 5.3
A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate fil…
-
Medium 6.5
Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem …
-
Medium 4.5
A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, au…
-
Critical 9.8
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticat…
-
Medium 6.1CVE-2025-40598 EPSS 46%
A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unaut…
-
High 7.5CVE-2025-40597 EPSS 23%
A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker t…
-
High 7.3CVE-2025-40596 EPSS 45%
A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker …
-
Critical 9.1
An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote at…
-
High 7.2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. B…
-
High 7.1CVE-2025-32821 EPSS 23%
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges…
-
High 8.3
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversa…
-
High 8.8
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path travers…
-
High 7.2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, w…
-
High 7.5
A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticate…
-
Medium 6.1
A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this …
-
High 7.2
An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 an…
-
High 7.2
A local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an atta…
-
High 7.2
An improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64 bit) client allows a low…
-
Medium 5.5
A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensitive Windows s…
-
Critical 9.8
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Managem…
KEV Jan 24, 2025 -
Critical 9.1
SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal…
-
Medium 4.9
A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an a…
-
High 7.2
A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall an…
-
High 7.2
A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash…
-
Critical 9.8
An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions…
-
High 7.8
A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to …
-
High 7.5
A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establi…
-
High 8.2
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass auth…
KEV Feb 18, 2025 -
Critical 9.8
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generato…