SonicWall Vulnerabilities
SonicWall's KEV entries cover its next-generation firewalls, the Secure Mobile Access (SMA) remote access appliances and the SonicWall Email Security product. The database tracks 19 SonicWall CVE records. CISA lists 19 of them as exploited in the wild, most recently on 2026-09-02. The most affected products are SMA1000 Appliances, SonicOS, SonicWall Email Security.
Recently Exploited SonicWall CVEs
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Missing Authorization Vulnerability
SonicWall SMA100 Appliances OS Command Injection Vulnerability
Affected Products
9 products| Product | CVEs | KEV | Latest |
|---|---|---|---|
| SMA1000 Appliances | 5 | 5 | 2026-09-02 |
| SonicOS | 3 | 3 | 2025-02-18 |
| SonicWall Email Security | 3 | 3 | 2021-11-03 |
| SMA100 | 2 | 2 | 2022-03-28 |
| SMA100 Appliances | 2 | 2 | 2025-05-01 |
| Secure Remote Access (SRA) | 1 | 1 | 2022-03-28 |
| SMA 100 Appliances | 1 | 1 | 2022-01-28 |
| SMA1000 appliance | 1 | 1 | 2025-12-17 |
| SSLVPN SMA100 | 1 | 1 | 2021-11-03 |
All SonicWall CVEs
19 records| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2026-83549 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | SonicWall | 7.8 | 10.8% | KEV | 2026-09-01 |
| CVE-2026-83548 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | SonicWall | 10.0 | 8.8% | KEV | 2026-09-01 |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | SonicWall | 7.2 | 11.8% | KEV | 2026-07-14 |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | SonicWall | 10.0 | 6.8% | KEV | 2026-07-14 |
| CVE-2025-40602 | SonicWall SMA1000 Missing Authorization Vulnerability | SonicWall | 6.6 | 2.8% | KEV | 2025-12-18 |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | SonicWall | 7.2 | 76.3% | KEV | 2023-12-05 |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | SonicWall | 6.5 | 4.2% | KEV | 2021-09-27 |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | SonicWall | 8.2 | 95.1% | KEV | 2025-01-09 |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability | SonicWall | 9.8 | 23.4% | KEV | 2025-01-23 |
| CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability | SonicWall | 9.3 | 18.4% | KEV | 2024-08-23 |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | SonicWall | 9.8 | 30.1% | KEV | 2021-08-04 |
| CVE-2019-7483 | SonicWall SMA100 Directory Traversal Vulnerability | SonicWall | 7.5 | 4.0% | KEV | 2019-12-19 |
| CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability | SonicWall | 9.8 | 26.9% | KEV | 2020-10-12 |
| CVE-2021-20038 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | SonicWall | 9.8 | 99.9% | KEV | 2021-12-08 |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability | SonicWall | 7.5 | 99.9% | KEV | 2019-12-17 |
| CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability | SonicWall | 9.8 | 88.8% | KEV | 2021-04-09 |
| CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability | SonicWall | 4.9 | 51.7% | KEV | 2021-04-20 |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | SonicWall | 9.8 | 40.0% | KEV | 2021-02-03 |
| CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability | SonicWall | 7.2 | 16.6% | KEV | 2021-04-09 |
Frequently Asked Questions
How many SonicWall vulnerabilities are actively exploited?→
19 SonicWall CVEs are in the CISA Known Exploited Vulnerabilities catalog as of 2026-10-09. The latest was added on 2026-09-02.
Which SonicWall vulnerabilities are used in ransomware attacks?→
CISA marks 13 SonicWall KEV entries as known to be used in ransomware campaigns, including CVE-2026-15410, CVE-2026-15409, CVE-2024-53704, CVE-2025-23006, CVE-2024-40766.
Which SonicWall products have the most exploited vulnerabilities?→
- +SMA1000 Appliances: 5 CVEs (5 in KEV)
- +SonicOS: 3 CVEs (3 in KEV)
- +SonicWall Email Security: 3 CVEs (3 in KEV)
- +SMA100: 2 CVEs (2 in KEV)
- +SMA100 Appliances: 2 CVEs (2 in KEV)
Where does SonicWall publish security advisories?→
SonicWall publishes security advisories at https://psirt.global.sonicwall.com/vuln-list. Check the vendor advisory for fixed versions and workarounds before applying updates.
Sources
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Vendor and product names for exploited CVEs follow the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not affiliated with or endorsed by SonicWall, MITRE, CISA, or FIRST.