Vendor
SonicWall vulnerabilities
177 advisories tracked, 19 exploited in the wild according to CISA, 38 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2026-83549Secure Mobile Access (SMA)
SMA1000 Appliances OS Command InjectionCVE-2026-83548Secure Mobile Access (SMA)
SMA1000 Appliances Server-Side Request ForgeryCVE-2026-15410Secure Mobile Access (SMA)
SMA1000 Appliances Code InjectionCVE-2026-15409Secure Mobile Access (SMA)
SMA1000 Appliances Server-Side Request ForgeryCVE-2025-40602Secure Mobile Access (SMA)
SMA1000 Missing AuthorizationCVE-2025-40597Secure Mobile Access (SMA)
Heap-based buffer overflow in SMA 100 Series
Show all 33Show fewer
CVE-2025-40598Secure Mobile Access (SMA)
Reflected cross-site scripting (XSS) in SMA 100 SeriesCVE-2025-40596Secure Mobile Access (SMA)
Stack-based buffer overflow in SMA 100 SeriesCVE-2025-40599Secure Mobile Access (SMA)
Authenticated arbitrary file upload in SMA 100 SeriesCVE-2025-32821Secure Mobile Access (SMA)
A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admi…CVE-2023-44221Secure Mobile Access (SMA)
SMA100 Appliances OS Command InjectionCVE-2021-20035Secure Mobile Access (SMA)
SMA100 Appliances OS Command InjectionCVE-2024-53704SonicOS firewalls
SonicOS SSLVPN Improper AuthenticationCVE-2025-23006Secure Mobile Access (SMA)
SMA1000 Appliances DeserializationCVE-2024-53703Secure Mobile Access (SMA)
A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp libr…CVE-2023-34133Email Security and management
SQL injection in GMS, AnalyticsCVE-2023-34125Email Security and management
Path Traversal in GMS, AnalyticsCVE-2023-34124Email Security and management
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…CVE-2023-34127Email Security and management
OS command injection in GMS, AnalyticsCVE-2023-34129Email Security and management
Path traversal in GMS, AnalyticsCVE-2023-0656SonicOS firewalls
Stack-based buffer overflow in SonicOSCVE-2023-0126Secure Mobile Access (SMA)
Pre-authentication path traversal in SonicWall SMA1000CVE-2022-1703Secure Mobile Access (SMA)
Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface all…CVE-2022-22274SonicOS firewalls
Stack-based buffer overflow in SonicOSCVE-2021-20045Secure Mobile Access (SMA)
Buffer overflow in SonicWall SMA100CVE-2021-20044Secure Mobile Access (SMA)
Post-authentication remote command injection in SonicWall SMA100CVE-2021-20043Secure Mobile Access (SMA)
Heap-based buffer overflow in SonicWall SMA100CVE-2021-20041Secure Mobile Access (SMA)
An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests se…CVE-2021-20040Secure Mobile Access (SMA)
Relative path traversal in SonicWall SMA100CVE-2021-20039Secure Mobile Access (SMA)
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST htt…CVE-2021-20031SonicOS firewalls
Host Header Redirection in SonicOSCVE-2021-20034Secure Mobile Access (SMA)
Improper access control in SMA100CVE-2021-20026Email Security and management
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command…
Products covered
Select a product to see only its advisories.
- SonicOS firewallsGen 6, Gen 7 and Gen 8 firewalls, including SSLVPN52 tracked
- Secure Mobile Access (SMA)SMA 100 and SMA 1000 remote access appliances60 tracked
- VPN and endpoint clientsNetExtender, Connect Tunnel, Global VPN Client and Capture Client20 tracked
- Email Security and managementEmail Security, GMS and Network Security Manager45 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-102255 | Secure Mobile Access (SMA) | Pre-authentication SSRF in SMA1000 | CRITICAL 10 | 0.48% | – | |
| CVE-2026-102256 | Secure Mobile Access (SMA) | OS command injection in SMA1000 | HIGH 7.8 | 0.49% | – | |
| CVE-2026-102257 | Secure Mobile Access (SMA) | Zip Slip in SMA1000 | HIGH 7.2 | 0.65% | – | |
| CVE-2026-102258 | Secure Mobile Access (SMA) | Post-authentication Stored Cross-Site Scripting (XSS) in SMA1000 | MEDIUM 6.1 | 0.39% | – | |
| CVE-2026-78327 | Email Security and management | OS command injection in Network Security Manager (NSM) | CRITICAL 9.1 | 1.6% | – | |
| CVE-2026-78328 | Email Security and management | Missing authorization in Network Security Manager (NSM) | CRITICAL 9.1 | 0.46% | – | |
| CVE-2026-81939 | Email Security and management | Zip Slip in Network Security Manager (NSM) | CRITICAL 9.1 | 0.68% | – | |
| CVE-2026-83549 | Secure Mobile Access (SMA) | SMA1000 Appliances OS Command Injection | HIGH 7.8 | 9.9% | Yes | |
| CVE-2026-83548Full analysis | Secure Mobile Access (SMA) | SMA1000 Appliances Server-Side Request Forgery | CRITICAL 10 | 8.0% | Yes | |
| CVE-2026-66152 | VPN and endpoint clients | Path traversal in NetExtender | HIGH 8.8 | 0.50% | – | |
| CVE-2026-66153 | VPN and endpoint clients | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client… | HIGH 7 | 0.24% | – | |
| CVE-2026-66149 | Email Security and management | Code injection in Email Security | HIGH 7.8 | 0.26% | – | |
| CVE-2026-66150 | Email Security and management | Code injection in Email Security | HIGH 7.8 | 0.26% | – | |
| CVE-2026-66145 | Email Security and management | Unauthenticated remote code execution in GMS | CRITICAL 9.1 | 0.66% | – | |
| CVE-2026-66146 | Email Security and management | Multiple Cross-Site Scripting (XSS) in GMS | MEDIUM 6.1 | 0.30% | – | |
| CVE-2026-18634 | Email Security and management | Insecure handling of serialized objects in GMS | HIGH 8.4 | 0.34% | – | |
| CVE-2026-66147 | Email Security and management | Unauthenticated command injection in GMS | CRITICAL 9.4 | 1.8% | – | |
| CVE-2026-66148 | Email Security and management | Authenticated command injection in GMS | MEDIUM 6.3 | 1.1% | – | |
| CVE-2026-66154 | Email Security and management | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS appl… | HIGH 8.3 | 0.20% | – | |
| CVE-2026-66151 | VPN and endpoint clients | SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory… | MEDIUM 5.5 | 0.16% | – | |
| CVE-2026-0516 | SonicOS firewalls | Improper neutralization of HTTP Headers for Scripting Syntax in SonicOS | MEDIUM 6.5 | 0.34% | – | |
| CVE-2026-15410 | Secure Mobile Access (SMA) | SMA1000 Appliances Code Injection | HIGH 7.2 | 12% | Yes · ransomware | |
| CVE-2026-15409Full analysis | Secure Mobile Access (SMA) | SMA1000 Appliances Server-Side Request Forgery | CRITICAL 10 | 6.8% | Yes · ransomware | |
| CVE-2026-0206 | SonicOS firewalls | Post-authentication Stack-based Buffer Overflow in SonicOS | MEDIUM 4.9 | 0.50% | – | |
| CVE-2026-0205 | SonicOS firewalls | Post-authentication Path Traversal in SonicOS | MEDIUM 6.8 | 0.39% | – | |
| CVE-2026-0204 | SonicOS firewalls | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions… | HIGH 8 | 0.38% | – | |
| CVE-2026-4112 | Secure Mobile Access (SMA) | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 s… | HIGH 7.2 | 0.53% | – | |
| CVE-2026-4113 | Secure Mobile Access (SMA) | Observable response discrepancy in SMA1000 | HIGH 7.2 | 0.60% | – | |
| CVE-2026-4114 | Secure Mobile Access (SMA) | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated… | MEDIUM 6.6 | 0.74% | – | |
| CVE-2026-4116 | Secure Mobile Access (SMA) | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated… | HIGH 7.2 | 0.71% | – | |
| CVE-2026-3468 | Email Security and management | Stored Cross-Site Scripting (XSS) in Email Security | MEDIUM 4.8 | 0.29% | – | |
| CVE-2026-3469 | Email Security and management | Denial-of-service (DoS) in Email Security | LOW 2.7 | 0.47% | – | |
| CVE-2026-3470 | Email Security and management | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that ma… | LOW 3.8 | 0.41% | – | |
| CVE-2026-3439 | SonicOS firewalls | Post-authentication Stack-based Buffer Overflow in SonicOS | MEDIUM 4.9 | 0.41% | – | |
| CVE-2026-0400 | SonicOS firewalls | Post-authentication Format String in SonicOS | MEDIUM 4.9 | 0.44% | – | |
| CVE-2026-0401 | SonicOS firewalls | Post-authentication NULL Pointer Dereference in SonicOS | MEDIUM 4.9 | 0.36% | – | |
| CVE-2026-0402 | SonicOS firewalls | Post-authentication Out-of-bounds Read in SonicOS | MEDIUM 4.9 | 0.36% | – | |
| CVE-2026-0399 | SonicOS firewalls | Multiple post-authentication stack-based buffer overflow in SonicOS | MEDIUM 4.9 | 0.33% | – | |
| CVE-2025-40602 | Secure Mobile Access (SMA) | SMA1000 Missing Authorization | MEDIUM 6.6 | 2.8% | Yes | |
| CVE-2025-40601 | SonicOS firewalls | Stack-based buffer overflow in SonicOS | HIGH 7.5 | 1.2% | – | |
| CVE-2025-40605 | Email Security and management | Path Traversal in Email Security | MEDIUM 5.3 | 0.33% | – | |
| CVE-2025-40604 | Email Security and management | Download of Code Without Integrity Check in Email Security | MEDIUM 6.5 | 0.19% | – | |
| CVE-2025-40603 | Secure Mobile Access (SMA) | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow… | MEDIUM 4.5 | 0.48% | – | |
| CVE-2025-40600 | SonicOS firewalls | Use of Externally-Controlled Format String in SonicOS | CRITICAL 9.8 | 0.91% | – | |
| CVE-2025-40597 | Secure Mobile Access (SMA) | Heap-based buffer overflow in SMA 100 Series | HIGH 7.5 | 30% | – | |
| CVE-2025-40598 | Secure Mobile Access (SMA) | Reflected cross-site scripting (XSS) in SMA 100 Series | MEDIUM 6.1 | 64% | – | |
| CVE-2025-40596 | Secure Mobile Access (SMA) | Stack-based buffer overflow in SMA 100 Series | HIGH 7.3 | 56% | – | |
| CVE-2025-40599 | Secure Mobile Access (SMA) | Authenticated arbitrary file upload in SMA 100 Series | CRITICAL 9.1 | 14% | – | |
| CVE-2025-40595 | Secure Mobile Access (SMA) | Server-side request forgery (SSRF) in SMA1000 | HIGH 7.2 | 0.36% | – | |
| CVE-2025-32821 | Secure Mobile Access (SMA) | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admi… | HIGH 7.1 | 20% | – | |
| CVE-2025-32820 | Secure Mobile Access (SMA) | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a p… | HIGH 8.3 | 2.9% | – | |
| CVE-2025-32819 | Secure Mobile Access (SMA) | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the… | HIGH 8.8 | 6.5% | – | |
| CVE-2025-2170 | Secure Mobile Access (SMA) | Server-side request forgery (SSRF) in SMA1000 | HIGH 7.2 | 0.34% | – | |
| CVE-2025-32818 | SonicOS firewalls | Null Pointer Dereference in SonicOS | HIGH 7.5 | 0.83% | – | |
| CVE-2025-32817 | VPN and endpoint clients | Improper Link Resolution in Connect Tunnel | MEDIUM 6.1 | 0.35% | – | |
| CVE-2025-23010 | VPN and endpoint clients | Link following in NetExtender | HIGH 7.2 | 0.41% | – | |
| CVE-2025-23008 | VPN and endpoint clients | Improper privilege management in NetExtender | HIGH 7.2 | 0.35% | – | |
| CVE-2025-23009 | VPN and endpoint clients | Local privilege escalation in NetExtender | HIGH 7.2 | 0.37% | – | |
| CVE-2025-23007 | VPN and endpoint clients | A vulnerability in the NetExtender Windows client log export function allows unauthorized access to sensiti… | MEDIUM 5.5 | 0.20% | – | |
| CVE-2025-23006 | Secure Mobile Access (SMA) | SMA1000 Appliances Deserialization | CRITICAL 9.8 | 23% | Yes · ransomware | |
| CVE-2024-12806 | SonicOS firewalls | Post-authentication absolute path traversal in SonicOS | MEDIUM 4.9 | 0.64% | – | |
| CVE-2024-12802 | SonicOS firewalls | SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (Us… | CRITICAL 9.1 | 0.50% | – | |
| CVE-2024-12803 | SonicOS firewalls | Post-authentication stack-based buffer overflow in SonicOS | HIGH 7.2 | 0.80% | – | |
| CVE-2024-12805 | SonicOS firewalls | Post-authentication format string in SonicOS | HIGH 7.2 | 0.71% | – | |
| CVE-2024-40765 | SonicOS firewalls | Integer-based buffer overflow in SonicOS | CRITICAL 9.8 | 0.80% | – | |
| CVE-2024-53706 | SonicOS firewalls | A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged… | HIGH 7.8 | 0.34% | – | |
| CVE-2024-53705 | SonicOS firewalls | Server-Side Request Forgery in SonicOS | HIGH 7.5 | 0.74% | – | |
| CVE-2024-53704 | SonicOS firewalls | SonicOS SSLVPN Improper Authentication | HIGH 8.2 | 95% | Yes · ransomware | |
| CVE-2024-40762 | SonicOS firewalls | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication to… | CRITICAL 9.8 | 1.0% | – | |
| CVE-2024-40763 | Secure Mobile Access (SMA) | Heap-based buffer overflow in SMA100 | HIGH 7.5 | 0.94% | – | |
| CVE-2024-45318 | Secure Mobile Access (SMA) | A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause St… | HIGH 8.1 | 1.0% | – | |
| CVE-2024-45319 | Secure Mobile Access (SMA) | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions allows a remo… | MEDIUM 6.3 | 0.23% | – | |
| CVE-2024-53702 | Secure Mobile Access (SMA) | Use of cryptographically weak pseudo-random number generator (PRNG) in SMA100 | MEDIUM 5.3 | 0.33% | – | |
| CVE-2024-53703 | Secure Mobile Access (SMA) | A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp libr… | HIGH 8.1 | 13% | – | |
| CVE-2024-45317 | Secure Mobile Access (SMA) | Server-Side Request Forgery (SSRF) in SMA1000 | HIGH 7.5 | 0.58% | – | |
| CVE-2024-45316 | VPN and endpoint clients | Link following in Connect Tunnel | HIGH 7.8 | 0.26% | – | |
| CVE-2024-45315 | VPN and endpoint clients | Link following in Connect Tunnel | MEDIUM 5.5 | 0.23% | – | |
| CVE-2024-40766 | SonicOS firewalls | SonicOS Improper Access Control | CRITICAL 9.3 | 18% | Yes · ransomware | |
| CVE-2024-40764 | SonicOS firewalls | Heap-based buffer overflow in SonicOS | HIGH 7.5 | 0.70% | – | |
| CVE-2024-29014 | VPN and endpoint clients | Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions… | HIGH 7.1 | 1.9% | – | |
| CVE-2024-29013 | SonicOS firewalls | Heap-based buffer overflow in SonicOS | MEDIUM 5.3 | 0.64% | – | |
| CVE-2024-29012 | SonicOS firewalls | Stack-based buffer overflow in SonicOS | MEDIUM 4.9 | 0.54% | – | |
| CVE-2024-29011 | Email Security and management | Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass in GMS | HIGH 7.5 | 0.88% | – | |
| CVE-2024-29010 | Email Security and management | The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection… | HIGH 7.1 | 0.62% | – | |
| CVE-2024-22398 | Email Security and management | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in Email Security | MEDIUM 4.9 | 0.90% | – | |
| CVE-2024-22397 | SonicOS firewalls | Cross-site scripting in SonicOS | HIGH 8.3 | 1.1% | – | |
| CVE-2024-22396 | SonicOS firewalls | Integer-based buffer overflow in SonicOS | MEDIUM 5.3 | 1.1% | – | |
| CVE-2024-22395 | Secure Mobile Access (SMA) | Improper access control in SMA100 | MEDIUM 6.3 | 0.43% | – | |
| CVE-2024-22394 | SonicOS firewalls | Improper authentication in SonicOS | CRITICAL 9.8 | 0.75% | – | |
| CVE-2023-6340 | VPN and endpoint clients | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are insta… | MEDIUM 5.5 | 0.21% | – | |
| CVE-2023-5970 | Secure Mobile Access (SMA) | Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker… | – | 0.91% | – | |
| CVE-2023-44221 | Secure Mobile Access (SMA) | SMA100 Appliances OS Command Injection | HIGH 7.2 | 76% | Yes | |
| CVE-2023-44220 | VPN and endpoint clients | SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking in NetExtender | – | 0.29% | – | |
| CVE-2023-44219 | SonicOS firewalls | Local privilege escalation in Directory Services Connector | – | 0.18% | – | |
| CVE-2023-41715 | SonicOS firewalls | SonicOS post-authentication Improper Privilege Management in SonicOS | HIGH 8.8 | 0.65% | – | |
| CVE-2023-41713 | SonicOS firewalls | SonicOS Use of Hard-coded Password in SonicOS | – | 0.59% | – | |
| CVE-2023-41712 | SonicOS firewalls | SonicOS post-authentication Stack-Based Buffer Overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-41711 | SonicOS firewalls | SonicOS post-authentication Stack-Based Buffer Overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-39280 | SonicOS firewalls | SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.w… | – | 0.80% | – | |
| CVE-2023-39279 | SonicOS firewalls | SonicOS post-authentication Stack-Based Buffer Overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-39278 | SonicOS firewalls | SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-39277 | SonicOS firewalls | SonicOS post-authentication stack-based buffer overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-39276 | SonicOS firewalls | SonicOS post-authentication stack-based buffer overflow in SonicOS | – | 0.80% | – | |
| CVE-2023-44218 | VPN and endpoint clients | A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to th… | HIGH 8.8 | 0.21% | – | |
| CVE-2023-44217 | VPN and endpoint clients | Local privilege escalation in NetExtender | HIGH 7.8 | 0.19% | – | |
| CVE-2023-34137 | Email Security and management | SonicWall GMS and Analytics CAS Web Services application use static values for authentication without prope… | – | 1.0% | – | |
| CVE-2023-34135 | Email Security and management | Path Traversal in GMS, Analytics | – | 1.6% | – | |
| CVE-2023-34136 | Email Security and management | Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricte… | – | 0.80% | – | |
| CVE-2023-34134 | Email Security and management | Exposure of sensitive information to an unauthorized actor in GMS, Analytics | – | 1.1% | – | |
| CVE-2023-34133 | Email Security and management | SQL injection in GMS, Analytics | HIGH 7.5 | 73% | – | |
| CVE-2023-34131 | Email Security and management | Exposure of sensitive information to an unauthorized actor in GMS, Analytics | – | 0.83% | – | |
| CVE-2023-34128 | Email Security and management | Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. | – | 0.71% | – | |
| CVE-2023-34126 | Email Security and management | Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underl… | – | 0.76% | – | |
| CVE-2023-34125 | Email Security and management | Path Traversal in GMS, Analytics | – | 25% | – | |
| CVE-2023-34123 | Email Security and management | Use of Hard-coded Cryptographic Key in GMS, Analytics | – | 0.81% | – | |
| CVE-2023-34124 | Email Security and management | The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing… | CRITICAL 9.8 | 50% | – | |
| CVE-2023-34127 | Email Security and management | OS command injection in GMS, Analytics | HIGH 8.8 | 86% | – | |
| CVE-2023-34129 | Email Security and management | Path traversal in GMS, Analytics | – | 41% | – | |
| CVE-2023-34130 | Email Security and management | SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt se… | – | 0.31% | – | |
| CVE-2023-34132 | Email Security and management | Use of password hash instead of password for authentication in GMS, Analytics | – | 7.7% | – | |
| CVE-2023-0656 | SonicOS firewalls | Stack-based buffer overflow in SonicOS | – | 41% | – | |
| CVE-2023-1101 | SonicOS firewalls | SonicOS SSLVPN improper restriction of excessive MFA attempts in SonicOS | HIGH 8.8 | 0.68% | – | |
| CVE-2023-0655 | Email Security and management | SonicWall Email Security contains a in SonicWall Email Security | MEDIUM 5.3 | 0.72% | – | |
| CVE-2023-0126 | Secure Mobile Access (SMA) | Pre-authentication path traversal in SonicWall SMA1000 | HIGH 7.5 | 73% | – | |
| CVE-2021-20030 | Email Security and management | SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain a… | HIGH 7.5 | 0.96% | – | |
| CVE-2022-2915 | Secure Mobile Access (SMA) | Heap-based Buffer Overflow in SMA100 | – | 6.7% | – | |
| CVE-2022-2324 | Email Security and management | Improperly Implemented Security Check in SonicWall Email Security | – | 0.62% | – | |
| CVE-2022-22280 | Email Security and management | Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection in SonicWall GMS, SonicWall Analytics On-Prem | – | 9.5% | – | |
| CVE-2022-1703 | Secure Mobile Access (SMA) | Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface all… | – | 13% | – | |
| CVE-2022-22282 | Secure Mobile Access (SMA) | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts access to… | – | 7.8% | – | |
| CVE-2022-22281 | VPN and endpoint clients | Buffer overflow in SonicWall NetExtender Windows (32 and 64 bit) Client | – | 0.51% | – | |
| CVE-2022-1702 | Secure Mobile Access (SMA) | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input… | – | 9.1% | – | |
| CVE-2022-1701 | Secure Mobile Access (SMA) | SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded en… | – | 4.8% | – | |
| CVE-2021-20051 | VPN and endpoint clients | SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Searc… | – | 0.74% | – | |
| CVE-2022-22278 | SonicOS firewalls | A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response mess… | – | 0.96% | – | |
| CVE-2022-22277 | SonicOS firewalls | A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information i… | – | 0.79% | – | |
| CVE-2022-22276 | SonicOS firewalls | A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. | – | 0.79% | – | |
| CVE-2022-22275 | SonicOS firewalls | Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing secur… | – | 1.1% | – | |
| CVE-2022-22279 | Secure Mobile Access (SMA) | Post-authentication arbitrary file read in SonicWall SRA/SMA100 | – | 1.1% | – | |
| CVE-2022-22274 | SonicOS firewalls | Stack-based buffer overflow in SonicOS | – | 76% | – | |
| CVE-2022-22273 | Secure Mobile Access (SMA) | Improper neutralization of Special Elements leading to OS Command Injection in SonicWall SRA/SMA100 | – | 1.9% | – | |
| CVE-2021-20048 | SonicOS firewalls | A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated a… | – | 1.9% | – | |
| CVE-2021-20046 | SonicOS firewalls | A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authentica… | – | 1.9% | – | |
| CVE-2021-20050 | Secure Mobile Access (SMA) | Improper Access Control in SonicWall SMA100 | – | 0.90% | – | |
| CVE-2021-20049 | Secure Mobile Access (SMA) | A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform… | – | 1.3% | – | |
| CVE-2021-20047 | VPN and endpoint clients | SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking in SonicWall Global VPN Client | – | 0.88% | – | |
| CVE-2021-20045 | Secure Mobile Access (SMA) | Buffer overflow in SonicWall SMA100 | – | 25% | – | |
| CVE-2021-20044 | Secure Mobile Access (SMA) | Post-authentication remote command injection in SonicWall SMA100 | – | 40% | – | |
| CVE-2021-20043 | Secure Mobile Access (SMA) | Heap-based buffer overflow in SonicWall SMA100 | – | 23% | – | |
| CVE-2021-20042 | Secure Mobile Access (SMA) | An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable prox… | – | 3.7% | – | |
| CVE-2021-20041 | Secure Mobile Access (SMA) | An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests se… | – | 21% | – | |
| CVE-2021-20040 | Secure Mobile Access (SMA) | Relative path traversal in SonicWall SMA100 | – | 25% | – | |
| CVE-2021-20039 | Secure Mobile Access (SMA) | Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST htt… | HIGH 8.8 | 79% | – | |
| CVE-2021-20038 | Secure Mobile Access (SMA) | SMA 100 Appliances Stack-Based Buffer Overflow | CRITICAL 9.8 | 100% | Yes · ransomware | |
| CVE-2021-20031 | SonicOS firewalls | Host Header Redirection in SonicOS | – | 13% | – | |
| CVE-2021-20035 | Secure Mobile Access (SMA) | SMA100 Appliances OS Command Injection | MEDIUM 6.5 | 4.2% | Yes | |
| CVE-2021-20034 | Secure Mobile Access (SMA) | Improper access control in SMA100 | – | 81% | – | |
| CVE-2021-20037 | VPN and endpoint clients | SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission in SonicWall Global VPN Client | – | 0.42% | – | |
| CVE-2021-20032 | Email Security and management | SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration in SonicWall Analytics On-Prem | – | 2.0% | – | |
| CVE-2021-20028 | Secure Mobile Access (SMA) | Secure Remote Access (SRA) SQL Injection | CRITICAL 9.8 | 30% | Yes · ransomware | |
| CVE-2021-20019 | SonicOS firewalls | A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP re… | – | 1.4% | – | |
| CVE-2021-20027 | SonicOS firewalls | Buffer overflow in SonicOS | – | 1.3% | – | |
| CVE-2021-20026 | Email Security and management | A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command… | – | 12% | – | |
| CVE-2021-20025 | Email Security and management | SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username a… | – | 0.36% | – | |
| CVE-2021-20023 | Email Security and management | Email Security Path Traversal | MEDIUM 4.9 | 52% | Yes · ransomware | |
| CVE-2021-20020 | Email Security and management | Command execution in Global Management System (GMS) | – | 3.7% | – | |
| CVE-2021-20022 | Email Security and management | Email Security Unrestricted Upload of File | HIGH 7.2 | 17% | Yes · ransomware | |
| CVE-2021-20021 | Email Security and management | Email Security Improper Privilege Management | CRITICAL 9.8 | 89% | Yes · ransomware | |
| CVE-2021-20018 | Secure Mobile Access (SMA) | Post-authenticated in SMA100 | – | 0.70% | – | |
| CVE-2021-20017 | Secure Mobile Access (SMA) | Post-authenticated command injection in SMA100 | – | 1.9% | – | |
| CVE-2020-5148 | SonicOS firewalls | SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this cli… | – | 0.89% | – | |
| CVE-2021-20016 | Secure Mobile Access (SMA) | SSLVPN SMA100 SQL Injection | CRITICAL 9.8 | 40% | Yes · ransomware | |
| CVE-2020-5147 | VPN and endpoint clients | SonicWall NetExtender Windows client vulnerable to unquoted service path in SonicWall NetExtender | – | 1.7% | – | |
| CVE-2020-5146 | Secure Mobile Access (SMA) | A vulnerability in SonicWall SMA100 appliance allow an authenticated management-user to perform OS command… | – | 1.9% | – | |
| CVE-2020-5135 | SonicOS firewalls | SonicOS Buffer Overflow | CRITICAL 9.8 | 27% | Yes · ransomware | |
| CVE-2019-7483 | Secure Mobile Access (SMA) | SMA100 Directory Traversal | HIGH 7.5 | 4.0% | Yes | |
| CVE-2019-7481 | Secure Mobile Access (SMA) | SMA100 SQL Injection | HIGH 7.5 | 100% | Yes · ransomware |
Sources: SonicWall security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.