SonicWall

Products

Exploited and recent CVEs

• CVE-2026-19868 High 7.5 Exploited An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful –
• CVE-2026-83549 High 7.8 Exploited Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which 9.9%
• CVE-2026-83548 Critical 10.0 Exploited A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit thi 8.0%
• CVE-2026-15410 High 7.2 Exploited Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could pot 11.8%
• CVE-2026-15409 Critical 10.0 Exploited A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make re 6.8%
• CVE-2025-40602 Medium 6.6 Exploited A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). 2.8%
• CVE-2025-23006 Critical 9.8 Exploited Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditi 26.6%
• CVE-2024-53704 High 8.2 Exploited An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. 95.3%
• CVE-2024-40766 Critical 9.3 Exploited An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the fir 18.4%
• CVE-2023-44221 High 7.2 Exploited Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to inject arbitrary commands as a 'nobody' u 76.2%
• CVE-2021-20038 Critical 9.8 Exploited A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user 99.9%
• CVE-2021-20035 Medium 6.5 Exploited Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS. 4.4%
• CVE-2021-20028 Critical 9.8 Exploited Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 30.1%
• CVE-2021-20023 Medium 4.9 Exploited SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. 51.7%
• CVE-2021-20022 High 7.2 Exploited SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. 16.6%
• CVE-2021-20021 Critical 9.8 Exploited A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. 88.8%
• CVE-2021-20016 Critical 9.8 Exploited A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. Th 40.0%
• CVE-2020-5135 Critical 9.8 Exploited A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. This vulnera 26.9%
• CVE-2019-7483 High 7.5 Exploited In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. 4.0%
• CVE-2019-7481 High 7.5 Exploited Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and earlier. 99.9%
• CVE-2026-109594 Medium 6.8 Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions w 0.4%
• CVE-2026-109593 Critical 9.1 An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing sensitive information. 0.5%
• CVE-2026-100232 High 7.2 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem 1.2%
• CVE-2026-96540 High 8.8 An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated attacker to obtain 0.3%
• CVE-2026-102258 Medium 6.1 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote 0.4%
• CVE-2026-102257 High 7.2 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted arc 0.7%
• CVE-2026-102256 High 7.8 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions c 0.5%
• CVE-2026-102255 Critical 10.0 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could p 1.0%
• CVE-2026-81939 Critical 9.1 A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the intended destination d 0.7%
• CVE-2026-78328 Critical 9.1 A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin. 0.5%