SonicWall vulnerabilities
221 published CVEs name SonicWall among the affected products; CISA lists 20 of them as exploited in the wild.
- 221Published CVEs221 of them scored
- 53Last 12 monthspublished in the last year
- 43Critical110 more rated high
- 20Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-19868
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass…
SonicWall · SonicOS
ExploitedHigh7.5 - CVE-2026-83549
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…
SonicWall · SMA1000
ExploitedHigh7.8 - CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2026-15410
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…
SonicWall · SMA1000
ExploitedHigh7.2 - CVE-2026-15409
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…
SonicWall · SMA1000
ExploitedCritical10.0 - CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
SonicWall · SMA1000
ExploitedMedium6.6 - CVE-2023-44221
Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to…
SonicWall · SMA100
ExploitedHigh7.2 - CVE-2021-20035
Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a…
SonicWall · SMA100
ExploitedMedium6.5 - CVE-2024-53704
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
SonicWall · SonicOS
ExploitedHigh8.2 - CVE-2025-23006
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management…
SonicWall · SMA1000
ExploitedCritical9.8