SonicWall known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 19 SonicWall vulnerabilities: 5 added in the last 365 days, 9 rated critical (CVSS 9 or higher), and 13 with known ransomware use. The most recent was added Sep 2, 2026.

RSS feed for SonicWall exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-09-02	CVE-2026-83548	SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	10 (v3.1)	8.0%	2026-09-05	Unknown
2026-09-02	CVE-2026-83549	SonicWall SMA1000 Appliances OS Command Injection Vulnerability	7.8 (v3.1)	9.9%	2026-09-05	Unknown
2026-07-14	CVE-2026-15409	SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability	10 (v3.1)	6.8%	2026-07-17	Known
2026-07-14	CVE-2026-15410	SonicWall SMA1000 Appliances Code Injection Vulnerability	7.2 (v3.1)	11.8%	2026-07-17	Known
2025-12-17	CVE-2025-40602	SonicWall SMA1000 Missing Authorization Vulnerability	6.6 (v3.1)	2.8%	2025-12-24	Unknown
2025-05-01	CVE-2023-44221	SonicWall SMA100 Appliances OS Command Injection Vulnerability	7.2 (v3.1)	76.3%	2025-05-22	Unknown
2025-04-16	CVE-2021-20035	SonicWall SMA100 Appliances OS Command Injection Vulnerability	6.5 (v3.1)	4.4%	2025-05-07	Unknown
2025-02-18	CVE-2024-53704	SonicWall SonicOS SSLVPN Improper Authentication Vulnerability	8.2 (v3.1)	95.3%	2025-03-11	Known
2025-01-24	CVE-2025-23006	SonicWall SMA1000 Appliances Deserialization Vulnerability	9.8 (v3.1)	23.4%	2025-02-14	Known
2024-09-09	CVE-2024-40766	SonicWall SonicOS Improper Access Control Vulnerability	9.3 (v3.1)	18.4%	2024-09-30	Known
2022-03-28	CVE-2019-7483	SonicWall SMA100 Directory Traversal Vulnerability	7.5 (v3.1)	4.0%	2022-04-18	Unknown
2022-03-28	CVE-2021-20028	SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability	9.8 (v3.1)	30.1%	2022-04-18	Known
2022-03-15	CVE-2020-5135	SonicWall SonicOS Buffer Overflow Vulnerability	9.8 (v3.1)	26.9%	2022-04-05	Known
2022-01-28	CVE-2021-20038	SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability	9.8 (v3.1)	>99.9%	2022-02-11	Known
2021-11-03	CVE-2019-7481	SonicWall SMA100 SQL Injection Vulnerability	7.5 (v3.1)	>99.9%	2022-05-03	Known
2021-11-03	CVE-2021-20016	SonicWall SSLVPN SMA100 SQL Injection Vulnerability	9.8 (v3.1)	40.0%	2021-11-17	Known
2021-11-03	CVE-2021-20021	SonicWall Email Security Improper Privilege Management Vulnerability	9.8 (v3.1)	88.8%	2021-11-17	Known
2021-11-03	CVE-2021-20022	SonicWall Email Security Unrestricted Upload of File Vulnerability	7.2 (v3.1)	16.6%	2021-11-17	Known
2021-11-03	CVE-2021-20023	SonicWall Email Security Path Traversal Vulnerability	4.9 (v3.1)	51.7%	2021-11-17	Known