SonicWall: exploited vulnerabilities
- 19exploited vulnerabilities
- 13used by ransomware
- Sep 2, 2026latest one added
- SMA1000 Appliances 5
- SonicOS 3
- SonicWall Email Security 3
- SMA100 Appliances 2
- SMA100 2
- SMA1000 appliance 1
- Secure Remote Access (SRA) 1
- SMA 100 Appliances 1
- SSLVPN SMA100 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 2, 2026 | OS Command Injection | SMA1000 Appliances | High 7.8 | 9.9% |
| Sep 2, 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critical 10.0 | 8.0% |
| Jul 14, 2026 | Code Injection | SMA1000 Appliances | High 7.2 | 12% |
| Jul 14, 2026 | Server-Side Request Forgery | SMA1000 Appliances | Critical 10.0 | 6.8% |
| Dec 17, 2025 | SMA1000 Missing Authorization | SMA1000 appliance | Medium 6.6 | 2.8% |
| May 1, 2025 | OS Command Injection | SMA100 Appliances | High 7.2 | 76% |
| Apr 16, 2025 | OS Command Injection | SMA100 Appliances | Medium 6.5 | 4.4% |
| Feb 18, 2025 | SSLVPN Improper Authentication | SonicOS | High 8.2 | 95% |
| Jan 24, 2025 | Deserialization | SMA1000 Appliances | Critical 9.8 | 23% |
| Sep 9, 2024 | Improper Access Control | SonicOS | Critical 9.3 | 18% |
| Mar 28, 2022 | SQL Injection | Secure Remote Access (SRA) | Critical 9.8 | 30% |
| Mar 28, 2022 | Directory Traversal | SMA100 | High 7.5 | 4.0% |
| Mar 15, 2022 | Buffer Overflow | SonicOS | Critical 9.8 | 27% |
| Jan 28, 2022 | Stack-Based Buffer Overflow | SMA 100 Appliances | Critical 9.8 | 99.9% |
| Nov 3, 2021 | Email Security Path Traversal | SonicWall Email Security | Medium 4.9 | 52% |
| Nov 3, 2021 | Email Security Unrestricted Upload of File | SonicWall Email Security | High 7.2 | 17% |
| Nov 3, 2021 | Email Security Improper Privilege Management | SonicWall Email Security | Critical 9.8 | 89% |
| Nov 3, 2021 | SQL Injection | SSLVPN SMA100 | Critical 9.8 | 40% |
| Nov 3, 2021 | SQL Injection | SMA100 | High 7.5 | 99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.