Patchfirst: SonicWall vulnerabilities

Patchfirst: SonicWall vulnerabilitieshttps://patchfirst.co/vendor/sonicwall/New and newly exploited SonicWall CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…https://patchfirst.co/cve/CVE-2026-102255/CVE-2026-102255Wed, 07 Oct 2026 00:00:00 GMTSonicWall · SMA1000. Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 71.9 of 100.public-exploit[KEV] CVE-2026-83548: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-83548/CVE-2026-83548#kevWed, 02 Sep 2026 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 8.0% (higher than 94.8% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.0 of 100.kevpublic-exploitT1190T1078[KEV] CVE-2026-83549: SonicWall SMA1000 Appliances OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-83549/CVE-2026-83549#kevWed, 02 Sep 2026 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 77.6 of 100.kevpublic-exploitT1078T1059[KEV] CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-15409/CVE-2026-15409#kevTue, 14 Jul 2026 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2026-07-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 6.8% (higher than 94% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Named in 1 threat report. Priority 87.7 of 100.kevransomwarepublic-exploitT1190T1090[KEV] CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-15410/CVE-2026-15410#kevTue, 14 Jul 2026 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2026-07-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 11.8% (higher than 96.1% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 86.1 of 100.kevransomwarepublic-exploitT1078T1059CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-40602/CVE-2025-40602Thu, 18 Dec 2025 00:00:00 GMTSonicWall · SMA1000 appliance. In CISA KEV since 2025-12-17. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.2% of CVEs). CVSS 6.6 MEDIUM. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts. Priority 79.9 of 100.kevpublic-exploitT1068T1078CVE-2025-40601: A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to…https://patchfirst.co/cve/CVE-2025-40601/CVE-2025-40601Thu, 20 Nov 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 0.9% (higher than 60.1% of CVEs). CVSS 7.5 HIGH. Priority 57.3 of 100.CVE-2025-40600: Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote…https://patchfirst.co/cve/CVE-2025-40600/CVE-2025-40600Tue, 29 Jul 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 62.2% of CVEs). CVSS 9.8 CRITICAL. Priority 59.3 of 100.CVE-2025-32819: A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…https://patchfirst.co/cve/CVE-2025-32819/CVE-2025-32819Wed, 07 May 2025 00:00:00 GMTSonicWall · SMA100. Not in CISA KEV. EPSS 6.5% (higher than 93.7% of CVEs). CVSS 8.8 HIGH. Priority 61.7 of 100.[KEV] CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-44221/CVE-2023-44221#kevThu, 01 May 2025 00:00:00 GMTSonicWall · SMA100 Appliances. In CISA KEV since 2025-05-01. ENISA EUVD lists it as exploited. EPSS 76.3% (higher than 99.54% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism; T1059.004 Unix Shell; T1543 Create or Modify System Process. Priority 62.9 of 100.kevT1068T1548T1059.004T1543CVE-2025-32818: A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote…https://patchfirst.co/cve/CVE-2025-32818/CVE-2025-32818Wed, 23 Apr 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 0.8% (higher than 57.9% of CVEs). CVSS 7.5 HIGH. Priority 56.8 of 100.[KEV] CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20035/CVE-2021-20035#kevWed, 16 Apr 2025 00:00:00 GMTSonicWall · SMA100 Appliances. In CISA KEV since 2025-04-16. ENISA EUVD lists it as exploited. EPSS 4.4% (higher than 91.3% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1059 Command and Scripting Interpreter; T1078 Valid Accounts. Priority 60.8 of 100.kevT1059T1078[KEV] CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-53704/CVE-2024-53704#kevTue, 18 Feb 2025 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2025-02-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 95.3% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1199 Trusted Relationship; T1212 Exploitation for Credential Access; T1078.004 Cloud Accounts; T1083 File and Directory Discovery. Priority 79.8 of 100.kevransomwarepublic-exploitT1199T1212T1078.004T1083[KEV] CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-23006/CVE-2025-23006#kevFri, 24 Jan 2025 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2025-01-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.5 of 100.kevransomwareT1190T1059CVE-2024-12802: SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…https://patchfirst.co/cve/CVE-2024-12802/CVE-2024-12802Thu, 09 Jan 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 0.5% (higher than 41.9% of CVEs). CVSS 9.1 CRITICAL. Priority 65.8 of 100.CVE-2024-40762: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token…https://patchfirst.co/cve/CVE-2024-40762/CVE-2024-40762Thu, 09 Jan 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.8 CRITICAL. Priority 59.6 of 100.CVE-2024-53705: A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to…https://patchfirst.co/cve/CVE-2024-53705/CVE-2024-53705Thu, 09 Jan 2025 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 0.7% (higher than 53.7% of CVEs). CVSS 7.5 HIGH. Priority 56.0 of 100.[KEV] CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-40766/CVE-2024-40766#kevMon, 09 Sep 2024 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2024-09-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 18.4% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 74.3 of 100.kevransomwareT1190T1005T1499.004CVE-2023-5970: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…https://patchfirst.co/cve/CVE-2023-5970/CVE-2023-5970Tue, 05 Dec 2023 00:00:00 GMTSonicWall · SMA100. Not in CISA KEV. EPSS 0.9% (higher than 60% of CVEs). Priority 47.0 of 100.CVE-2023-39280: SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL…https://patchfirst.co/cve/CVE-2023-39280/CVE-2023-39280Tue, 17 Oct 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.CVE-2023-39279: SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint…https://patchfirst.co/cve/CVE-2023-39279/CVE-2023-39279Tue, 17 Oct 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.CVE-2023-39278: SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi…https://patchfirst.co/cve/CVE-2023-39278/CVE-2023-39278Tue, 17 Oct 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.CVE-2023-39277: SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL…https://patchfirst.co/cve/CVE-2023-39277/CVE-2023-39277Tue, 17 Oct 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.CVE-2023-39276: SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads…https://patchfirst.co/cve/CVE-2023-39276/CVE-2023-39276Tue, 17 Oct 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 1.0% (higher than 61.8% of CVEs). Priority 52.4 of 100.CVE-2023-34132: Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…https://patchfirst.co/cve/CVE-2023-34132/CVE-2023-34132Thu, 13 Jul 2023 00:00:00 GMTSonicWall · GMS. Not in CISA KEV. EPSS 7.7% (higher than 94.6% of CVEs). Public exploit code exists. Priority 68.9 of 100.public-exploitCVE-2023-34124: The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…https://patchfirst.co/cve/CVE-2023-34124/CVE-2023-34124Thu, 13 Jul 2023 00:00:00 GMTSonicWall · GMS. Not in CISA KEV. EPSS 50.5% (higher than 98.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.6 of 100.public-exploitCVE-2023-34133: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…https://patchfirst.co/cve/CVE-2023-34133/CVE-2023-34133Thu, 13 Jul 2023 00:00:00 GMTSonicWall · GMS. Not in CISA KEV. EPSS 72.8% (higher than 99.45% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 65.1 of 100.public-exploitCVE-2023-34127: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…https://patchfirst.co/cve/CVE-2023-34127/CVE-2023-34127Thu, 13 Jul 2023 00:00:00 GMTSonicWall · GMS. Not in CISA KEV. EPSS 85.8% (higher than 99.73% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 31.1 of 100.public-exploitCVE-2023-0656: A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of…https://patchfirst.co/cve/CVE-2023-0656/CVE-2023-0656Thu, 02 Mar 2023 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 41.3% (higher than 98.7% of CVEs). Public exploit code exists. Priority 60.4 of 100.public-exploitCVE-2023-0126: Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…https://patchfirst.co/cve/CVE-2023-0126/CVE-2023-0126Thu, 19 Jan 2023 00:00:00 GMTSonicWall · SonicWall SMA1000. Not in CISA KEV. EPSS 72.7% (higher than 99.44% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 30.1 of 100.public-exploitCVE-2022-2915: A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to…https://patchfirst.co/cve/CVE-2022-2915/CVE-2022-2915Fri, 26 Aug 2022 00:00:00 GMTSonicWall · SMA100. Not in CISA KEV. EPSS 6.9% (higher than 94% of CVEs). Priority 53.8 of 100.CVE-2022-1703: Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a…https://patchfirst.co/cve/CVE-2022-1703/CVE-2022-1703Fri, 03 Jun 2022 00:00:00 GMTSonicWall · SMA100. Not in CISA KEV. EPSS 13.0% (higher than 96.3% of CVEs). Priority 54.3 of 100.CVE-2022-22279: A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and…https://patchfirst.co/cve/CVE-2022-22279/CVE-2022-22279Wed, 13 Apr 2022 00:00:00 GMTSonicWall · SonicWall SRA/SMA100. Not in CISA KEV. EPSS 1.1% (higher than 65.9% of CVEs). Priority 58.9 of 100.[KEV] CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20028/CVE-2021-20028#kevMon, 28 Mar 2022 00:00:00 GMTSonicWall · Secure Remote Access (SRA). In CISA KEV since 2022-03-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 30.1% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.4 of 100.kevransomwareT1190T1059[KEV] CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-7483/CVE-2019-7483#kevMon, 28 Mar 2022 00:00:00 GMTSonicWall · SMA100. In CISA KEV since 2022-03-28. ENISA EUVD lists it as exploited. EPSS 4.0% (higher than 90.5% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1083 File and Directory Discovery. Priority 61.4 of 100.kevT1190T1083CVE-2022-22274: A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker…https://patchfirst.co/cve/CVE-2022-22274/CVE-2022-22274Fri, 25 Mar 2022 00:00:00 GMTSonicWall · SonicOS. Not in CISA KEV. EPSS 75.5% (higher than 99.52% of CVEs). Public exploit code exists. Priority 61.3 of 100.public-exploit[KEV] CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2020-5135/CVE-2020-5135#kevTue, 15 Mar 2022 00:00:00 GMTSonicWall · SonicOS. In CISA KEV since 2022-03-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 26.9% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 74.5 of 100.kevransomwareT1190T1059T1499.004[KEV] CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20038/CVE-2021-20038#kevFri, 28 Jan 2022 00:00:00 GMTSonicWall · SMA 100 Appliances. In CISA KEV since 2022-01-28, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059CVE-2021-20039: Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method…https://patchfirst.co/cve/CVE-2021-20039/CVE-2021-20039Wed, 08 Dec 2021 00:00:00 GMTSonicWall · SonicWall SMA100. Not in CISA KEV. EPSS 78.7% (higher than 99.59% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 68.0 of 100.public-exploit[KEV] CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20021/CVE-2021-20021#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 88.8% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1136 Create Account. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1136[KEV] CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20016/CVE-2021-20016#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SSLVPN SMA100. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 40.0% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Named in 1 threat report. Priority 78.5 of 100.kevransomwareT1190T1005[KEV] CVE-2019-7481: SonicWall SMA100 SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-7481/CVE-2019-7481#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SMA100. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.kevransomwarepublic-exploitT1190T1005[KEV] CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20022/CVE-2021-20022#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 16.6% (higher than 97% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1105 Ingress Tool Transfer. Priority 72.4 of 100.kevransomwareT1078T1105[KEV] CVE-2021-20023: SonicWall Email Security Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-20023/CVE-2021-20023#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 51.7% (higher than 98.9% of CVEs). CVSS 4.9 MEDIUM. ATT&CK: T1078 Valid Accounts; T1005 Data from Local System. Priority 71.2 of 100.kevransomwareT1078T1005CVE-2021-20034: An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path…https://patchfirst.co/cve/CVE-2021-20034/CVE-2021-20034Mon, 27 Sep 2021 00:00:00 GMTSonicWall · SMA100. Not in CISA KEV. EPSS 81.8% (higher than 99.65% of CVEs). Public exploit code exists. Priority 24.9 of 100.public-exploitCVE-2018-9866: A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…https://patchfirst.co/cve/CVE-2018-9866/CVE-2018-9866Fri, 03 Aug 2018 00:00:00 GMTSonicWall · Global Management System (GMS). Not in CISA KEV. EPSS 4.5% (higher than 91.5% of CVEs). CVSS 9.8 CRITICAL. Priority 61.7 of 100.