SonicWall
SonicWall known exploited vulnerabilities
Every SonicWall vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 13 of them are known to be used by ransomware.
19 CVEs
- CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability · added September 2, 2026
- CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability · added September 2, 2026
- CVE-2026-15410 ransomwareSonicWall SMA1000 Appliances Code Injection Vulnerability · added July 14, 2026
- CVE-2026-15409 ransomwareSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability · added July 14, 2026
- CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability · added December 17, 2025
- CVE-2023-44221SonicWall SMA100 Appliances OS Command Injection Vulnerability · added May 1, 2025
- CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection Vulnerability · added April 16, 2025
- CVE-2024-53704 ransomwareSonicWall SonicOS SSLVPN Improper Authentication Vulnerability · added February 18, 2025
- CVE-2025-23006 ransomwareSonicWall SMA1000 Appliances Deserialization Vulnerability · added January 24, 2025
- CVE-2024-40766 ransomwareSonicWall SonicOS Improper Access Control Vulnerability · added September 9, 2024
- CVE-2021-20028 ransomwareSonicWall Secure Remote Access (SRA) SQL Injection Vulnerability · added March 28, 2022
- CVE-2019-7483SonicWall SMA100 Directory Traversal Vulnerability · added March 28, 2022
- CVE-2020-5135 ransomwareSonicWall SonicOS Buffer Overflow Vulnerability · added March 15, 2022
- CVE-2021-20038 ransomwareSonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability · added January 28, 2022
- CVE-2021-20023 ransomwareSonicWall Email Security Path Traversal Vulnerability · added November 3, 2021
- CVE-2021-20022 ransomwareSonicWall Email Security Unrestricted Upload of File Vulnerability · added November 3, 2021
- CVE-2021-20021 ransomwareSonicWall Email Security Improper Privilege Management Vulnerability · added November 3, 2021
- CVE-2021-20016 ransomwareSonicWall SSLVPN SMA100 SQL Injection Vulnerability · added November 3, 2021
- CVE-2019-7481 ransomwareSonicWall SMA100 SQL Injection Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).