SonicWall vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 201916
3. 202017
4. 202132
5. 202220
6. 202334
7. 202421
8. 202531
9. 202642

Known exploitedNewest addition to KEV first

• CVE-2026-83549

  Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…

  SonicWall · SMA1000

  ExploitedHigh7.8
• CVE-2026-83548

  A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote…

  SonicWall · SMA1000

  ExploitedCritical10.0
• CVE-2026-15410

  Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console…

  SonicWall · SMA1000

  ExploitedHigh7.2
• CVE-2026-15409

  A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could…

  SonicWall · SMA1000

  ExploitedCritical10.0
• CVE-2025-40602

  A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

  SonicWall · SMA1000

  ExploitedMedium6.6
• CVE-2023-44221

  Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administrative privilege to…

  SonicWall · SMA100

  ExploitedHigh7.2
• CVE-2021-20035

  Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a…

  SonicWall · SMA100

  ExploitedMedium6.5
• CVE-2024-53704

  An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

  SonicWall · SonicOS

  ExploitedHigh8.2
• CVE-2025-23006

  Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management…

  SonicWall · SMA1000

  ExploitedCritical9.8
• CVE-2024-40766

  An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access…

  SonicWall · SonicOS

  ExploitedCritical9.3

Newest CVEs

• CVE-2026-109594

  Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability has been identified in the End-of-Life…

  SonicWall · Global Management System (GMS)

  Medium6.8
• CVE-2026-109593

  An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read internal GMS files, potentially exposing…

  SonicWall · Global Management System (GMS)

  Critical9.1
• CVE-2026-100232

  Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the…

  SonicWall · Network Security Manager (NSM)

  High7.2
• CVE-2026-96540

  An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a…

  SonicWall · Network Security Manager (NSM)

  High8.8
• CVE-2026-102258

  Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific…

  SonicWall · SMA1000

  Medium6.1
• CVE-2026-102257

  A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended…

  SonicWall · SMA1000

  High7.2
• CVE-2026-102256

  Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…

  SonicWall · SMA1000

  High7.8
• CVE-2026-102255

  A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path,…

  SonicWall · SMA1000

  Critical10.0
• CVE-2026-81939

  A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract…

  SonicWall · Network Security Manager (NSM)

  Critical9.1
• CVE-2026-78328

  A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to…

  SonicWall · Network Security Manager (NSM)

  Critical9.1