News stories · 30d
5
Advisories · 30d
1
Added to KEV · 90d
2
Actively exploited (CISA KEV)
| Added | CVE | Product | Vulnerability | Ransomware |
|---|---|---|---|---|
| 2026-09-02 | CVE-2026-83548 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | |
| 2026-09-02 | CVE-2026-83549 | SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | |
| 2026-07-14 | CVE-2026-15409 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Known |
| 2026-07-14 | CVE-2026-15410 | SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | Known |
| 2025-12-17 | CVE-2025-40602 | SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | |
| 2025-05-01 | CVE-2023-44221 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | |
| 2025-04-16 | CVE-2021-20035 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | |
| 2025-02-18 | CVE-2024-53704 | SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | Known |
| 2025-01-24 | CVE-2025-23006 | SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | Known |
| 2024-09-09 | CVE-2024-40766 | SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | Known |
| 2022-03-28 | CVE-2021-20028 | Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | Known |
| 2022-03-28 | CVE-2019-7483 | SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | |
| 2022-03-15 | CVE-2020-5135 | SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | Known |
| 2022-01-28 | CVE-2021-20038 | SMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | Known |
| 2021-11-03 | CVE-2021-20021 | SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | Known |
| 2021-11-03 | CVE-2019-7481 | SMA100 | SonicWall SMA100 SQL Injection Vulnerability | Known |
| 2021-11-03 | CVE-2021-20022 | SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | Known |
| 2021-11-03 | CVE-2021-20023 | SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | Known |
| 2021-11-03 | CVE-2021-20016 | SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | Known |
CVEs in the news
Timeline (last 30 days)
- ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability — ZDI Published Advisories, 2026-10-15
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack — Dark Reading, 2026-10-12
- SonicWall and Splunk Patch Critical Vulnerabilities — SecurityWeek, 2026-10-08
- SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances — The Hacker News, 2026-10-07
- SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) — Help Net Security +5 sources, 2026-10-07
- SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) — Help Net Security +1 sources, 2026-10-07