Patchfirst
Patchfirst

Vendor

SonicWall

19 of 46 SonicWall CVEs in Patchfirst (41%) are in of vulnerabilities exploited in the wild, 13 of them used by ransomware.

CVEs
46
In CISA KEV
1941%
Known ransomware use
13
Median days to KEV
202
from publication
Latest KEV listing
2 Sep 2026
Watch SonicWall Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • SMA1000 Appliances In KEV: 5 CVEs: 5
  • SonicOS In KEV: 3 CVEs: 16
  • SonicWall Email Security In KEV: 3 CVEs: 3
  • SMA100 In KEV: 2 CVEs: 7
  • SMA100 Appliances In KEV: 2 CVEs: 2
  • Secure Remote Access (SRA) In KEV: 1 CVEs: 1
  • SMA 100 Appliances In KEV: 1 CVEs: 1
  • SMA1000 appliance In KEV: 1 CVEs: 1
  • SSLVPN SMA100 In KEV: 1 CVEs: 1
  • GMS In KEV: 0 CVEs: 4

Top ATT&CK techniques

What attackers do with SonicWall CVEs
Open in ATT&CK Navigator

Counts are SonicWall CVEs linked to the technique. Each link’s provenance is on the CVE page.

SonicWall CVEs

46 CVEs, by priority
  1. CVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1090Proxy1 report
    6.8%Top 6%
    87.7priority
  2. CVE-2026-15410SonicWall SMA1000 Appliances Code Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    11.8%Top 3.9%
    86.1priority
  3. CVE-2025-40602SonicWall SMA1000 Missing Authorization Vulnerability
    SonicWall · SMA1000 applianceKEVPublic exploitMedium · 6.6T1078Valid AccountsT1068Exploitation for Privilege Escalation
    2.8%Top 14%
    79.9priority
  4. CVE-2021-20038SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
    SonicWall · SMA 100 AppliancesKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.03%
    79.9priority
  5. CVE-2024-53704SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
    SonicWall · SonicOSKEVRansomwarePublic exploitCritical · 9.8T1199Trusted RelationshipT1078.004Cloud Accounts+2 more
    95.3%Top 0.13%
    79.8priority
  6. CVE-2021-20021SonicWall Email Security Improper Privilege Management Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1136Create Account
    88.8%Top 0.22%
    79.8priority
  7. CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
    SonicWall · SMA1000 AppliancesKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    8.0%Top 5.2%
    79.0priority
  8. CVE-2021-20016SonicWall SSLVPN SMA100 SQL Injection Vulnerability
    SonicWall · SSLVPN SMA100KEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System1 report
    40.0%Top 1.4%
    78.5priority
  9. CVE-2021-20028SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
    SonicWall · Secure Remote Access (SRA)KEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    30.1%Top 1.8%
    78.4priority
  10. CVE-2019-7481SonicWall SMA100 SQL Injection Vulnerability
    SonicWall · SMA100KEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    99.9%Top 0.03%
    78.2priority
  11. CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability
    SonicWall · SMA1000 AppliancesKEVPublic exploitHigh · 7.8T1078Valid AccountsT1059Command and Scripting Interpreter
    9.9%Top 4.4%
    77.6priority
  12. CVE-2025-23006SonicWall SMA1000 Appliances Deserialization Vulnerability
    SonicWall · SMA1000 AppliancesKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    26.6%Top 2%
    74.5priority
  13. CVE-2020-5135SonicWall SonicOS Buffer Overflow Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    26.9%Top 2%
    74.5priority
  14. CVE-2024-40766SonicWall SonicOS Improper Access Control Vulnerability
    SonicWall · SonicOSKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System+1 more
    18.4%Top 2.8%
    74.3priority
  15. CVE-2021-20022SonicWall Email Security Unrestricted Upload of File Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwareHigh · 7.2T1078Valid AccountsT1105Ingress Tool Transfer
    16.6%Top 3%
    72.4priority
  16. CVE-2026-102255A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended…
    SonicWall · SMA1000Public exploitCritical · 10.0
    1.0%Top 38%
    71.9priority
  17. CVE-2021-20023SonicWall Email Security Path Traversal Vulnerability
    SonicWall · SonicWall Email SecurityKEVRansomwareMedium · 4.9T1078Valid AccountsT1005Data from Local System
    51.7%Top 1.1%
    71.2priority
  18. CVE-2023-34132Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows…
    SonicWall · GMSPublic exploit
    7.7%Top 5.4%
    68.9priority
  19. CVE-2021-20039Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method…
    SonicWall · SonicWall SMA100Public exploitHigh · 8.8
    78.7%Top 0.41%
    68.0priority
  20. CVE-2023-34124The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing…
    SonicWall · GMSPublic exploitCritical · 9.8
    50.5%Top 1.1%
    66.6priority
  21. CVE-2024-12802SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User…
    SonicWall · SonicOSCritical · 9.1
    0.5%Top 58%
    65.8priority
  22. CVE-2023-34133Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS…
    SonicWall · GMSPublic exploitHigh · 7.5
    72.8%Top 0.55%
    65.1priority
  23. CVE-2023-44221SonicWall SMA100 Appliances OS Command Injection Vulnerability
    SonicWall · SMA100 AppliancesKEVHigh · 7.2T1059.004Unix ShellT1543Create or Modify System Process+2 more
    76.3%Top 0.46%
    62.9priority
  24. CVE-2025-32819A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path…
    SonicWall · SMA100High · 8.8
    6.5%Top 6.3%
    61.7priority
  25. CVE-2018-9866A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management…
    SonicWall · Global Management System (GMS)Critical · 9.8
    4.5%Top 8.5%
    61.7priority
  26. CVE-2019-7483SonicWall SMA100 Directory Traversal Vulnerability
    SonicWall · SMA100KEVHigh · 7.5T1190Exploit Public-Facing ApplicationT1083File and Directory Discovery
    4.0%Top 9.5%
    61.4priority
  27. CVE-2022-22274A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker…
    SonicWall · SonicOSPublic exploit
    75.5%Top 0.48%
    61.3priority
  28. CVE-2021-20035SonicWall SMA100 Appliances OS Command Injection Vulnerability
    SonicWall · SMA100 AppliancesKEVMedium · 6.5T1078Valid AccountsT1059Command and Scripting Interpreter
    4.4%Top 8.7%
    60.8priority
  29. CVE-2023-0656A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of…
    SonicWall · SonicOSPublic exploit
    41.3%Top 1.3%
    60.4priority
  30. CVE-2024-40762Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token…
    SonicWall · SonicOSCritical · 9.8
    1.0%Top 36%
    59.6priority
  31. CVE-2025-40600Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote…
    SonicWall · SonicOSCritical · 9.8
    1.0%Top 38%
    59.3priority
  32. CVE-2022-22279A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and…
    SonicWall · SonicWall SRA/SMA100
    1.1%Top 34%
    58.9priority
  33. CVE-2025-40601A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to…
    SonicWall · SonicOSHigh · 7.5
    0.9%Top 40%
    57.3priority
  34. CVE-2025-32818A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote…
    SonicWall · SonicOSHigh · 7.5
    0.8%Top 42%
    56.8priority
  35. CVE-2024-53705A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to…
    SonicWall · SonicOSHigh · 7.5
    0.7%Top 46%
    56.0priority
  36. CVE-2022-1703Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a…
    SonicWall · SMA100
    13.0%Top 3.7%
    54.3priority
  37. CVE-2022-2915A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote authenticated attacker to…
    SonicWall · SMA100
    6.9%Top 6%
    53.8priority
  38. CVE-2023-39280SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL…
    SonicWall · SonicOS
    1.0%Top 38%
    52.4priority
  39. CVE-2023-39279SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint…
    SonicWall · SonicOS
    1.0%Top 38%
    52.4priority
  40. CVE-2023-39278SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi…
    SonicWall · SonicOS
    1.0%Top 38%
    52.4priority
  41. CVE-2023-39277SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL…
    SonicWall · SonicOS
    1.0%Top 38%
    52.4priority
  42. CVE-2023-39276SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads…
    SonicWall · SonicOS
    1.0%Top 38%
    52.4priority
  43. CVE-2023-5970Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…
    SonicWall · SMA100
    0.9%Top 40%
    47.0priority
  44. CVE-2023-34127Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall…
    SonicWall · GMSPublic exploitHigh · 8.8
    85.8%Top 0.27%
    31.1priority
  45. CVE-2023-0126Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated…
    SonicWall · SonicWall SMA1000Public exploitHigh · 7.5
    72.7%Top 0.56%
    30.1priority
  46. CVE-2021-20034An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path…
    SonicWall · SMA100Public exploit
    81.8%Top 0.35%
    24.9priority
↑ ↓ chooseEnter openEsc close