SonicWall
20 vulnerabilities in SonicWall products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-19868 | SonicWall | SonicOS SSLVPN | SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability | 6 Nov 2026 | 20 Nov 2026 | Unknown |
| CVE-2026-83548 | SonicWall | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2 Sep 2026 | 5 Sep 2026 | Unknown |
| CVE-2026-83549 | SonicWall | SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2 Sep 2026 | 5 Sep 2026 | Unknown |
| CVE-2026-15409 | SonicWall | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 14 Jul 2026 | 17 Jul 2026 | Known |
| CVE-2026-15410 | SonicWall | SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 14 Jul 2026 | 17 Jul 2026 | Known |
| CVE-2025-40602 | SonicWall | SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | 17 Dec 2025 | 24 Dec 2025 | Unknown |
| CVE-2023-44221 | SonicWall | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 1 May 2025 | 22 May 2025 | Unknown |
| CVE-2021-20035 | SonicWall | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 16 Apr 2025 | 7 May 2025 | Unknown |
| CVE-2024-53704 | SonicWall | SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 18 Feb 2025 | 11 Mar 2025 | Known |
| CVE-2025-23006 | SonicWall | SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | 24 Jan 2025 | 14 Feb 2025 | Known |
| CVE-2024-40766 | SonicWall | SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | 9 Sep 2024 | 30 Sep 2024 | Known |
| CVE-2019-7483 | SonicWall | SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Unknown |
| CVE-2021-20028 | SonicWall | Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 28 Mar 2022 | 18 Apr 2022 | Known |
| CVE-2020-5135 | SonicWall | SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | 15 Mar 2022 | 5 Apr 2022 | Known |
| CVE-2021-20038 | SonicWall | SMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | 28 Jan 2022 | 11 Feb 2022 | Known |
| CVE-2019-7481 | SonicWall | SMA100 | SonicWall SMA100 SQL Injection Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2021-20016 | SonicWall | SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-20021 | SonicWall | SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-20022 | SonicWall | SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |
| CVE-2021-20023 | SonicWall | SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | 3 Nov 2021 | 17 Nov 2021 | Known |