Login Request a demo
SM
Product
Sma8200v
by Sonicwall · last CVE Sep 1, 2026
On CISA KEVExploited in the wildRansomware-linked
10
CVEs
6
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities10In the news11Timeline
Severity mix
Critical 3High 5Medium 2Low 0
Severity
All severities10Critical3High5Medium2Low0
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Sma8200v to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-83548
In wildKEV
10.0
8%
Sep 1
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Affected: before 12.4.3-03526; 12.5.0 before 12.5.0-02952
CVE-2026-15409
RansomwareIn wildKEV
10.0
7%
Jul 14
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
Affected: 12.4.3-03245; 12.4.3-03387; 12.4.3-03434; 12.5.0-02283; 12.5.0-02624; 12.5.0-02800
CVE-2025-23006
RansomwareIn wildKEV
9.8
23%
Jan 23
SonicWall SMA1000 Appliances Deserialization Vulnerability
Affected: before 12.4.3-02854
CVE-2026-83549
In wildKEV
7.8
10%
Sep 1
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
Affected: before 12.4.3-03526; 12.5.0 before 12.5.0-02952
CVE-2026-15410
RansomwareIn wildKEV
7.2
12%
Jul 14
SonicWall SMA1000 Appliances Code Injection Vulnerability
Affected: 12.4.3-03245; 12.4.3-03387; 12.4.3-03434; 12.5.0-02283; 12.5.0-02624; 12.5.0-02800
CVE-2025-40602
In wildKEV
6.6
3%
Dec 18
SonicWall SMA1000 Missing Authorization Vulnerability
Affected: before 12.4.3-03245; 12.5.0 before 12.5.0-02283
CVE-2026-4116
7.2
0%
Apr 9
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication
Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624
CVE-2026-4113
7.2
0%
Apr 9
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials
Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624
CVE-2026-4112
7.2
1%
Apr 9
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only…
Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624
CVE-2026-4114
6.6
1%
Apr 9
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication
Affected: before 12.4.3-03387; 12.5.0 before 12.5.0-02624
Showing 10