SO
Vendor
Sonicwall
776
CVEs
126
On KEV
6
New 30D
Products
SM10.0
SMA1000
SonicWall
10 CVEs6 on KEV4 new
NS9.1
Network Security Manager (NSM)
SonicWall
5 CVEs0 on KEV2 new
S29.8
Sma 210 Firmware
Sonicwall
35 CVEs6 on KEV0 new
S49.8
Sma 410 Firmware
Sonicwall
35 CVEs6 on KEV0 new
SF10.0
Sma6210 Firmware
Sonicwall
10 CVEs6 on KEV0 new
SF10.0
Sma7210 Firmware
Sonicwall
10 CVEs6 on KEV0 new
SM10.0
Sma8200v
Sonicwall
10 CVEs6 on KEV0 new
S29.8
Sma 200 Firmware
Sonicwall
27 CVEs5 on KEV0 new
S49.8
Sma 400 Firmware
Sonicwall
27 CVEs5 on KEV0 new
ES10.0
Email Security
SonicWall
13 CVEs5 on KEV0 new
SA10.0
SMA1000 Appliances
SonicWall
5 CVEs5 on KEV0 new
S59.8
Sma 500v Firmware
Sonicwall
32 CVEs4 on KEV0 new
SM7.5
SMA
VPN
4 CVEs4 on KEV0 new
SO9.8
SonicOS
SonicWall
77 CVEs3 on KEV0 new
S19.8
Sma 100 Firmware
Sonicwall
13 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 5000 Firmware
Sonicwall
5 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 5050 Firmware
Sonicwall
5 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 7000 Firmware
Sonicwall
5 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 7050 Firmware
Sonicwall
5 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 9000 Firmware
Sonicwall
5 CVEs3 on KEV0 new
ES9.8
Email Security Virtual Appliance
Sonicwall
4 CVEs3 on KEV0 new
HE9.8
Hosted Email Security
Sonicwall
4 CVEs3 on KEV0 new
SE9.8
SonicWall Email Security
SonicWall
4 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 3300 Firmware
Sonicwall
3 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 4300 Firmware
Sonicwall
3 CVEs3 on KEV0 new
ES9.8
Email Security Appliance 8300 Firmware
Sonicwall
3 CVEs3 on KEV0 new
SF9.8
Sma6200 Firmware
Sonicwall
6 CVEs2 on KEV0 new
SF9.8
Sma7200 Firmware
Sonicwall
6 CVEs2 on KEV0 new
S59.8
Sma 500v
Sonicwall
3 CVEs2 on KEV0 new
SA7.2
SMA100 Appliances
SonicWall
2 CVEs2 on KEV0 new
SS9.8
SonicWall SMA100
SonicWall
2 CVEs2 on KEV0 new
SO9.8
SonicOSv
SonicWall
18 CVEs1 on KEV0 new
SF7.8
Sma1000 Firmware
Sonicwall
5 CVEs1 on KEV0 new
S19.8
Sra 1600 Firmware
Sonicwall
2 CVEs1 on KEV0 new
S49.8
Sra 4600 Firmware
Sonicwall
2 CVEs1 on KEV0 new
SR9.8
Secure Remote Access (SRA)
SonicWall
1 CVEs1 on KEV0 new
S19.8
SMA 100 Appliances
SonicWall
1 CVEs1 on KEV0 new
SA6.6
SMA1000 appliance
SonicWall
1 CVEs1 on KEV0 new
SS9.8
SonicWall SRA/SMA100
SonicWall
1 CVEs1 on KEV0 new
SE9.8
Sra Ex6000 Firmware
Sonicwall
1 CVEs1 on KEV0 new
SE9.8
Sra Ex7000 Firmware
Sonicwall
1 CVEs1 on KEV0 new
SE9.8
Sra Ex9000 Firmware
Sonicwall
1 CVEs1 on KEV0 new
SV9.8
Sra VA Firmware
Sonicwall
1 CVEs1 on KEV0 new
SS9.8
SSLVPN SMA100
SonicWall
1 CVEs1 on KEV0 new
GM9.9
Global Management System
Sonicwall
31 CVEs0 on KEV0 new
AN9.8
Analytics
Sonicwall
17 CVEs0 on KEV0 new
NE8.8
NetExtender
SonicWall
11 CVEs0 on KEV0 new
AN9.9
Analyzer
Sonicwall
10 CVEs0 on KEV0 new
GV8.6
Global VPN Client
SonicWall
7 CVEs0 on KEV0 new
SC–
Scrutinizer
Sonicwall
7 CVEs0 on KEV0 new
GM9.4
GMS
SonicWall
6 CVEs0 on KEV0 new
SF8.8
Sma100 Firmware
Sonicwall
5 CVEs0 on KEV0 new
S69.8
Sma 6200 Firmware
Sonicwall
4 CVEs0 on KEV0 new
S69.8
Sma 6210 Firmware
Sonicwall
4 CVEs0 on KEV0 new
S79.8
Sma 7200 Firmware
Sonicwall
4 CVEs0 on KEV0 new
S79.8
Sma 7210 Firmware
Sonicwall
4 CVEs0 on KEV0 new
TF7.5
Tz300p Firmware
Sonicwall
4 CVEs0 on KEV0 new
TF7.5
Tz300w Firmware
Sonicwall
4 CVEs0 on KEV0 new
TF7.5
Tz350 Firmware
Sonicwall
4 CVEs0 on KEV0 new
TF7.5
Tz350w Firmware
Sonicwall
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100232 | NS Network Security Manager (NSM) SonicWall | 7.2 | Oct 14 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security… |
| CVE-2026-96540 | NS Network Security Manager (NSM) SonicWall | 8.8 | Oct 14 | An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote… |
| CVE-2026-102258 | SM SMA1000 SonicWall | 6.1 | Oct 7 | Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could… |
| CVE-2026-102257 | SM SMA1000 SonicWall | 7.2 | Oct 7 | A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a… |
| CVE-2026-102256 | SM SMA1000 SonicWall | 7.8 | Oct 7 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in… |
| CVE-2026-102255 | SM SMA1000 SonicWall | 10.0 | Oct 7 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path |
| CVE-2026-81939 | NS Network Security Manager (NSM) SonicWall | 9.1 | Sep 4 | A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an attacker to extract files outside the… |
| CVE-2026-78328 | NS Network Security Manager (NSM) SonicWall | 9.1 | Sep 4 | A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to… |
| CVE-2026-78327 | NS Network Security Manager (NSM) SonicWall | 9.1 | Sep 4 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management… |
| CVE-2026-83549 In wildKEV | SM SMA1000 SonicWall | 7.8 | Sep 1 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability |
| CVE-2026-83548 In wildKEV | SM SMA1000 SonicWall | 10.0 | Sep 1 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
| CVE-2026-66153 | NE NetExtender SonicWall | 7.0 | Aug 25 | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths |
| CVE-2026-66152 | NE NetExtender SonicWall | 8.8 | Aug 25 | A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root |
| CVE-2026-66150 | ES Email Security SonicWall | 7.8 | Aug 11 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall… |
| CVE-2026-66149 | ES Email Security SonicWall | 7.8 | Aug 11 | Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall… |
| CVE-2026-18634 | GM GMS SonicWall | 8.4 | Aug 11 | An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions |
| CVE-2026-66154 | GM GMS SonicWall | 8.3 | Aug 11 | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a… |
| CVE-2026-66148 | GM GMS SonicWall | 6.3 | Aug 11 | An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local… |
| CVE-2026-66147 | GM GMS SonicWall | 9.4 | Aug 11 | An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote… |
| CVE-2026-66146 | GM GMS SonicWall | 6.1 | Aug 11 | Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script… |
| CVE-2026-66145 | GM GMS SonicWall | 9.1 | Aug 11 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and… |
| CVE-2026-66151 | GV Global VPN Client SonicWall | 5.5 | Aug 7 | SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to… |
| CVE-2026-0516 | SO SonicOS SonicWall | 6.5 | Aug 5 | A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall… |
| CVE-2026-15410 RansomwareIn wildKEV | SM SMA1000 SonicWall | 7.2 | Jul 14 | SonicWall SMA1000 Appliances Code Injection Vulnerability |
| CVE-2026-15409 RansomwareIn wildKEV | SM SMA1000 SonicWall | 10.0 | Jul 14 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability |
| CVE-2026-0206 | SO SonicOS SonicWall | 4.9 | Apr 29 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall |
| CVE-2026-0205 | SO SonicOS SonicWall | 6.8 | Apr 29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services |
| CVE-2026-0204 | SO SonicOS SonicWall | 8.0 | Apr 29 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions |
| CVE-2026-4116 | SF Sma6210 Firmware Sonicwall | 7.2 | Apr 9 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication |
| CVE-2026-4114 | SF Sma7210 Firmware Sonicwall | 6.6 | Apr 9 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication |
| CVE-2026-4113 | SF Sma7200 Firmware Sonicwall | 7.2 | Apr 9 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials |
| CVE-2026-4112 | SM Sma8200v Sonicwall | 7.2 | Apr 9 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only… |
| CVE-2026-3470 | ES Email Security Sonicwall | 3.8 | Mar 31 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as… |
| CVE-2026-3469 | ES Email Security Sonicwall | 2.7 | Mar 31 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user… |
| CVE-2026-3468 | ES Email Security Sonicwall | 4.8 | Mar 31 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web… |
| CVE-2026-3439 | SO Sonicos Sonicwall | 4.9 | Mar 4 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall |
| CVE-2026-0402 | SO Sonicos Sonicwall | 4.9 | Feb 24 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall |
| CVE-2026-0401 | SO Sonicos Sonicwall | 4.9 | Feb 24 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall |
| CVE-2026-0400 | SO Sonicos Sonicwall | 4.9 | Feb 24 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall |
| CVE-2026-0399 | SO Sonicos Sonicwall | 4.9 | Feb 24 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint |
| CVE-2025-40602 In wildKEV | SM SMA1000 SonicWall | 6.6 | Dec 18 | SonicWall SMA1000 Missing Authorization Vulnerability |
| CVE-2025-40605 | ES Email Security Appliance 7000 Firmware Sonicwall | 5.3 | Nov 20 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal… |
| CVE-2025-40604 | ES Email Security Appliance 7050 Firmware Sonicwall | 9.8 | Nov 20 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with… |
| CVE-2025-40601 | SO Sonicos Sonicwall | 7.5 | Nov 20 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted… |
| CVE-2025-40603 | S4 Sma 410 Firmware Sonicwall | 4.5 | Oct 31 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view… |
| CVE-2025-40600 | SO Sonicos Sonicwall | 9.8 | Jul 29 | Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption |
| CVE-2025-40598 | S2 Sma 210 Firmware Sonicwall | 6.1 | Jul 23 | A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary… |
| CVE-2025-40597 | S2 Sma 210 Firmware Sonicwall | 7.5 | Jul 23 | A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in… |
| CVE-2025-40596 | S4 Sma 410 Firmware Sonicwall | 7.3 | Jul 23 | A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in… |
| CVE-2025-40599 | S2 Sma 210 Firmware Sonicwall | 9.1 | Jul 23 | An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface |
| CVE-2025-32821 | S1 Sma 100 Firmware Sonicwall | 7.2 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the… |
| CVE-2025-32820 | S2 Sma 200 Firmware Sonicwall | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal sequence to make any directory on the SMA appliance… |
| CVE-2025-32819 | S4 Sma 400 Firmware Sonicwall | 8.8 | May 7 | A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path traversal checks and delete an arbitrary file potentially resulting… |
| CVE-2025-2170 | SF Sma1000 Firmware Sonicwall | 7.2 | Apr 30 | A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a… |
| CVE-2025-23006 RansomwareIn wildKEV | SM SMA1000 SonicWall | 9.8 | Jan 23 | SonicWall SMA1000 Appliances Deserialization Vulnerability |
| CVE-2024-12802 | SO SonicOS SonicWall | 9.1 | Jan 9 | SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when… |
| CVE-2024-12806 | SO SonicOS SonicWall | 4.9 | Jan 9 | A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file |
| CVE-2024-12805 | SO SonicOS SonicWall | 7.2 | Jan 9 | A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution |
| CVE-2024-12803 | SO SonicOS SonicWall | 7.2 | Jan 9 | A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution |
| CVE-2024-40765 | SO SonicOS SonicWall | 9.8 | Jan 9 | An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute… |