EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

SonicWall

19 SonicWall vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue19
Last 12 months5
In ransomware campaigns13
Last addition2 September 2026

The vulnerabilities19

  1. 2 September 2026CVE-2026-83549SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability
  2. 2 September 2026CVE-2026-83548SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
  3. 14 July 2026CVE-2026-15410SMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection VulnerabilityRansomware
  4. 14 July 2026CVE-2026-15409SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityRansomware
  5. 17 December 2025CVE-2025-40602SMA1000 applianceSonicWall SMA1000 Missing Authorization Vulnerability
  6. 1 May 2025CVE-2023-44221SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
  7. 16 April 2025CVE-2021-20035SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
  8. 18 February 2025CVE-2024-53704SonicOSSonicWall SonicOS SSLVPN Improper Authentication VulnerabilityRansomware
  9. 24 January 2025CVE-2025-23006SMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization VulnerabilityRansomware
  10. 9 September 2024CVE-2024-40766SonicOSSonicWall SonicOS Improper Access Control VulnerabilityRansomware
  11. 28 March 2022CVE-2021-20028Secure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityRansomware
  12. 28 March 2022CVE-2019-7483SMA100SonicWall SMA100 Directory Traversal Vulnerability
  13. 15 March 2022CVE-2020-5135SonicOSSonicWall SonicOS Buffer Overflow VulnerabilityRansomware
  14. 28 January 2022CVE-2021-20038SMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityRansomware
  15. 3 November 2021CVE-2021-20023SonicWall Email SecuritySonicWall Email Security Path Traversal VulnerabilityRansomware
  16. 3 November 2021CVE-2021-20022SonicWall Email SecuritySonicWall Email Security Unrestricted Upload of File VulnerabilityRansomware
  17. 3 November 2021CVE-2021-20021SonicWall Email SecuritySonicWall Email Security Improper Privilege Management VulnerabilityRansomware
  18. 3 November 2021CVE-2021-20016SSLVPN SMA100SonicWall SSLVPN SMA100 SQL Injection VulnerabilityRansomware
  19. 3 November 2021CVE-2019-7481SMA100SonicWall SMA100 SQL Injection VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, SonicWall included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website