SonicWall

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 7.8HighSep 2, 2026SonicWall SMA1000 Appliances Code / command injectionCVE-2026-83549Affected: SonicWall SMA1000 appliances. Attacker gains: Remote code execution and full system access. Recommended action: Patch SonicWall SMA1000 appliances with the latest available security updates.Added to KEV Sep 2, 2026Exploited9.9% likelyExploit codeMetasploit
• 10.0CriticalSep 2, 2026SonicWall SMA1000 Appliances SSRFCVE-2026-83548Affected: SonicWall SMA1000 Appliances running firmware version 10.2.0.1-86sv or earlier. Attacker gains: Ability to perform unauthorized actions and access sensitive data. Recommended action: Update to the latest firmware version 10.2.0.2-86sv or later and apply any additional security patches provided by SonicWall.Added to KEV Sep 2, 2026Exploited8% likelyExploit codeMetasploit · NucleiDetection
• 7.2HighJul 14, 2026SonicWall SMA1000 Appliances Code / command injectionCVE-2026-15410SonicWall SMA1000 Appliances An attacker gains remote code execution Patch SonicWall SMA1000 Appliances to version 11.5.1.5 or later.Added to KEV Jul 14, 2026Exploited12% likelyExploit codeDetection
• 10.0CriticalJul 14, 2026SonicWall SMA1000 Appliances SSRFCVE-2026-15409Affected: SonicWall SMA1000 appliances with vulnerable software versions. Attacker gains: Ability to execute arbitrary system commands, potentially leading to remote code execution and full system compromise. Recommended action: Update to the latest software version, as provided by SonicWall, and apply all recommended security patches to prevent exploitation of this vulnerability.Added to KEV Jul 14, 2026Exploited6.8% likelyExploit codeMetasploit · NucleiDetection
• 6.6MediumDec 17, 2025SonicWall SMA1000 appliance Auth bypass / access controlCVE-2025-40602SonicWall SMA1000 appliances and related management interfaces. An attacker gains unauthorized access to sensitive data and elevated privileges. Patch SonicWall SMA1000 appliances with the latest security updates as soon as possible.Added to KEV Dec 17, 2025Exploited2.8% likely
• 7.2HighDec 5, 2023SonicWall SMA100 Appliances Code / command injectionCVE-2023-44221(1) SonicWall SMA100 appliances are affected. (2) An attacker gains OS command execution. (3) Update to the latest SonicWall SMA100 firmware.Added to KEV May 1, 2025 · 512 days after publicationExploited76% likely
• 6.5MediumSep 27, 2021SonicWall SMA100 Appliances Code / command injectionCVE-2021-20035SonicWall SMA100 Appliances are affected. An attacker gains remote code execution and potentially unauthorized access to sensitive data. Update SonicWall SMA100 Appliances to the latest version with the included patch.Added to KEV Apr 16, 2025 · 1,296 days after publicationExploited4.4% likely
• 8.2HighJan 9, 2025SonicWall SonicOS Auth bypass / access controlCVE-2024-537041. SonicWall SonicOS SSLVPN is affected. 2. An attacker gains unauthorized access to the network and potential elevated privileges. 3. Update SonicOS SSLVPN to the latest version and enforce strong passwords and multi-factor authentication.Added to KEV Feb 18, 2025 · 40 days after publicationExploited95% likelyExploit codeNucleiDetection
• 9.8CriticalJan 23, 2025SonicWall SMA1000 Appliances DeserializationCVE-2025-23006(1) SonicWall SMA1000 appliances are affected, specifically the web portal and management interface. (2) An attacker gains remote code execution and potentially full control of the affected appliance. (3) Update to the latest SonicWall SMA1000 firmware version to patch the vulnerability.Added to KEV Jan 24, 2025 · 1 day after publicationExploited23% likely
• 9.3CriticalAug 23, 2024SonicWall SonicOS Auth bypass / access controlCVE-2024-40766Affected: SonicWall Firewall Gen 5, Gen 6, and Gen 7 devices. Attacker gains: Unauthorized access to system resources and potential firewall crash. Recommended action: Update SonicOS to the latest version with the patch for CVE-2024-40766.Added to KEV Sep 9, 2024 · 17 days after publicationExploited18% likely
• 7.5HighDec 19, 2019SonicWall SMA100 Path traversal / file handlingCVE-2019-7483(1) SonicWall SMA100 series devices are affected. (2) An attacker gains unauthorized access to sensitive files and directories. (3) Apply the latest security patches from SonicWall and restrict access to sensitive areas.Added to KEV Mar 28, 2022 · 830 days after publicationExploited4% likely
• 9.8CriticalAug 4, 2021SonicWall Secure Remote Access (SRA) SQL injectionCVE-2021-200281. SonicWall Secure Remote Access (SRA) appliances are affected. 2. An attacker gains unauthorized access to sensitive data, including user credentials and configuration settings. 3. Apply SonicWall SRA 7.0.2.2 or later, and ensure that all appliances are updated and patched regularly.Added to KEV Mar 28, 2022 · 235 days after publicationExploited30% likely
• 9.8CriticalOct 12, 2020SonicWall SonicOS Memory corruptionCVE-2020-5135Firewalls running SonicWall SonicOS 6.2.2.4-25S are affected. An attacker gains remote code execution and full system access. Update to SonicOS 6.5.3.3-3g or later to remediate the vulnerability.Added to KEV Mar 15, 2022 · 519 days after publicationExploited27% likely
• 9.8CriticalDec 8, 2021SonicWall SMA 100 Appliances Memory corruptionCVE-2021-20038SonicWall SMA 100 Appliances are affected. An attacker gains remote code execution and potentially network access. Update to the latest firmware version available from SonicWall.Added to KEV Jan 28, 2022 · 51 days after publicationExploited100% likelyExploit codeNucleiDetection
• 9.8CriticalFeb 3, 2021SonicWall SSLVPN SMA100 SQL injectionCVE-2021-20016(1) SonicWall SMA 100 Series Secure Mobile Access appliances are affected. (2) An attacker gains unauthorized access to sensitive data and potentially executes arbitrary code. (3) Apply the latest patches and ensure SMA 100 Series appliances are running the latest firmware version.Added to KEV Nov 3, 2021 · 272 days after publicationExploited40% likelyDetection
• 4.9MediumApr 20, 2021SonicWall Email Security Path traversal / file handlingCVE-2021-20023(1) SonicWall Email Security appliances are affected. (2) An attacker gains access to sensitive files and data on the system. (3) Update SonicWall Email Security to the latest version, and ensure all security patches are applied.Added to KEV Nov 3, 2021 · 197 days after publicationExploited52% likelyDetection
• 7.2HighApr 9, 2021SonicWall Email Security Path traversal / file handlingCVE-2021-20022Affected: SonicWall Email Security appliances with certain software versions. Attacker gains: Ability to upload arbitrary files, potentially leading to remote code execution. Recommended action: Update SonicWall Email Security appliances to the latest version available, following the vendor's instructions for patching and configuration changes.Added to KEV Nov 3, 2021 · 207 days after publicationExploited17% likely
• 7.5HighDec 17, 2019SonicWall SMA100 SQL injectionCVE-2019-7481SonicWall SMA100 series appliances. An attacker gains access to sensitive data and potentially admin privileges. Upgrade to a patched version of SonicWall SMA100 or apply the latest security patches.Added to KEV Nov 3, 2021 · 686 days after publicationExploited100% likelyExploit codeNucleiDetection
• 9.8CriticalApr 9, 2021SonicWall Email Security Auth bypass / access controlCVE-2021-20021Affected: SonicWall Email Security appliances. Attacker gains: Unauthenticated remote code execution. Recommended action: Apply the latest available patches and update SonicWall Email Security appliances to a version that is not vulnerable.Added to KEV Nov 3, 2021 · 207 days after publicationExploited89% likelyExploit codeNucleiDetection

Recent

• –UnscoredOct 15, 2026SonicWallADV-cccs-2ec6ecc70dc2Serial number: AV26-1048 Date: October 15, 2026 As of October 14, 2026, SonicWall is affected by vulnerabilities in the following product: Network Security Manager (NSM) On-Prem (VMWare, Hyper-V, Azure and KVM) Version 4.3.1 and prior The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SonicWall NSM On-Prem Affected By Multiple Vulnerabilities SonicWall Security Advisory
• 7.2HighOct 14, 2026SonicWall Network Security Manager (NSM) Code / command injectionCVE-2026-100232Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute ar1.2% likely
• 8.8HighOct 14, 2026SonicWall Network Security Manager (NSM) Auth bypass / access controlCVE-2026-96540Affected: SonicWall Network Security Manager (NSM) on-prem export settings. An attacker gains: Access to sensitive information and potential escalation of privileges to administrator. Recommended action: Update to the latest version of SonicWall NSM and restrict access to sensitive export settings.
• 6.1MediumOct 7, 2026SonicWall SMA1000 XSSCVE-2026-102258Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code
• 7.2HighOct 7, 2026SonicWall SMA1000 Path traversal / file handlingCVE-2026-102257A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution.
• 7.8HighOct 7, 2026SonicWall SMA1000 Code / command injectionCVE-2026-102256Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS com
• 10.0CriticalOct 7, 2026SonicWall SMA1000 SSRFCVE-2026-102255A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to direct the appliance to issue requests on their behalf and
• 9.1CriticalSep 4, 2026SonicWall Network Security Manager (NSM) Path traversal / file handlingCVE-2026-81939Affected: SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality. An attacker gains: Arbitrary file write access outside the intended destination directory. Recommended action: Update SonicWall Network Security Manager (NSM) On-Prem to the latest version that addresses CVE-2026-81939.
• 9.1CriticalSep 4, 2026SonicWall Network Security Manager (NSM) Auth bypass / access controlCVE-2026-783281. The SonicWall Network Security Manager (NSM) On-Prem Management interface is affected. 2. An attacker gains SuperAdmin privileges. 3. Update to the latest version of NSM and ensure all patches are applied.
• 9.1CriticalSep 4, 2026SonicWall Network Security Manager (NSM) Code / command injectionCVE-2026-78327Affected: SonicWall Network Security Manager (NSM) On-Prem Management interface. Attacker gain: Ability to execute arbitrary system commands on the underlying operating system. Recommended action: Apply the latest patches or updates provided by SonicWall to address this vulnerability.1.6% likely
• 10.0CriticalSep 2, 2026SonicWall SMA1000 Appliances SSRFCVE-2026-83548Affected: SonicWall SMA1000 Appliances running firmware version 10.2.0.1-86sv or earlier. Attacker gains: Ability to perform unauthorized actions and access sensitive data. Recommended action: Update to the latest firmware version 10.2.0.2-86sv or later and apply any additional security patches provided by SonicWall.Exploited8% likelyExploit codeMetasploit · NucleiDetection
• 7.8HighSep 2, 2026SonicWall SMA1000 Appliances Code / command injectionCVE-2026-83549Affected: SonicWall SMA1000 appliances. Attacker gains: Remote code execution and full system access. Recommended action: Patch SonicWall SMA1000 appliances with the latest available security updates.Exploited9.9% likelyExploit codeMetasploit
• 7.0HighAug 25, 2026SonicWall NetExtender Path traversal / file handlingCVE-2026-66153The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths.
• 8.8HighAug 25, 2026SonicWall NetExtender Path traversal / file handlingCVE-2026-66152Affected: SonicWall NetExtender Linux client file extractor component. An attacker gains: Arbitrary root access to the system. Recommended action: Update the SonicWall NetExtender Linux client to the latest version with the patch for CVE-2026-66152.
• 7.8HighAug 11, 2026SonicWall Email Security Code / command injectionCVE-2026-66150Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP.
• 7.8HighAug 11, 2026SonicWall Email Security Code / command injectionCVE-2026-66149Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask.
• 8.4HighAug 11, 2026SonicWall GMS DeserializationCVE-2026-18634An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions. A local attacker with the ability to interact with the service could exploit this behavior to perform unauthorized actions through the affecte
• 8.3HighAug 11, 2026SonicWall GMS Crypto / certificateCVE-2026-66154An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes.
• 6.3MediumAug 11, 2026SonicWall GMS Code / command injectionCVE-2026-66148An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.1.1% likely
• 9.4CriticalAug 11, 2026SonicWall GMS Code / command injectionCVE-2026-66147An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.1.8% likely
• 6.1MediumAug 11, 2026SonicWall GMS XSSCVE-2026-66146Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.
• 9.1CriticalAug 11, 2026SonicWall GMS Code / command injectionCVE-2026-66145An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
• 5.5MediumAug 7, 2026SonicWall Global VPN Client Memory corruptionCVE-2026-66151SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.
• 6.5MediumAug 5, 2026SonicWall SonicOSCVE-2026-0516A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header and redirect firewall management users to arbitrary web domains.
• 10.0CriticalJul 14, 2026SonicWall SMA1000 Appliances SSRFCVE-2026-15409Affected: SonicWall SMA1000 appliances with vulnerable software versions. Attacker gains: Ability to execute arbitrary system commands, potentially leading to remote code execution and full system compromise. Recommended action: Update to the latest software version, as provided by SonicWall, and apply all recommended security patches to prevent exploitation of this vulnerability.Exploited6.8% likelyExploit codeMetasploit · NucleiDetection
• 7.2HighJul 14, 2026SonicWall SMA1000 Appliances Code / command injectionCVE-2026-15410SonicWall SMA1000 Appliances An attacker gains remote code execution Patch SonicWall SMA1000 Appliances to version 11.5.1.5 or later.Exploited12% likelyExploit codeDetection
• 4.9MediumApr 29, 2026SonicWall SonicOS Memory corruptionCVE-2026-0206A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
• 6.8MediumApr 29, 2026SonicWall SonicOS Path traversal / file handlingCVE-2026-0205A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
• 8.0HighApr 29, 2026SonicWall SonicOS Auth bypass / access controlCVE-2026-0204A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
• 7.2HighApr 9, 2026Sonicwall sma6210 firmwareCVE-2026-4116Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
• 7.2HighApr 9, 2026Sonicwall sma6210 firmwareCVE-2026-4113An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
• 6.6MediumApr 9, 2026SonicWall SMA1000CVE-2026-4114Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
• 7.2HighApr 9, 2026SonicWall SMA1000 SQL injectionCVE-2026-4112Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
• 3.8LowMar 31, 2026SonicWall Email SecurityCVE-2026-3470A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.
• 2.7LowMar 31, 2026SonicWall Email Security Denial of serviceCVE-2026-3469A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.
• 4.8MediumMar 31, 2026SonicWall Email Security XSSCVE-2026-3468A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.
• 4.9MediumMar 4, 2026SonicWall SonicOS Memory corruptionCVE-2026-3439A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.
• 4.9MediumFeb 24, 2026SonicWall SonicOS Memory corruptionCVE-2026-0402A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
• 4.9MediumFeb 24, 2026SonicWall SonicOS Memory corruptionCVE-2026-0401A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
• 4.9MediumFeb 24, 2026SonicWall SonicOSCVE-2026-0400A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
• 4.9MediumFeb 24, 2026SonicWall SonicOS Memory corruptionCVE-2026-0399Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
• 6.6MediumDec 17, 2025SonicWall SMA1000 appliance Auth bypass / access controlCVE-2025-40602SonicWall SMA1000 appliances and related management interfaces. An attacker gains unauthorized access to sensitive data and elevated privileges. Patch SonicWall SMA1000 appliances with the latest security updates as soon as possible.Exploited2.8% likely
• 7.5HighNov 20, 2025SonicWall SonicOS Memory corruptionCVE-2025-40601A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.
• 5.3MediumNov 20, 2025SonicWall Email Security Path traversal / file handlingCVE-2025-40605A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.
• 6.5MediumNov 20, 2025SonicWall Email Security Code / command injectionCVE-2025-40604Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.
• 4.5MediumOct 31, 2025SonicWall SMA100 Information disclosureCVE-2025-40603A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data.
• –UnscoredSep 22, 2025SonicWallADV-sonicwall-705be5777486SonicWall SMA 100 10.2.2.2-92sv build has been released with additional file checking, providing the capability to remove known rootkit malware present on the SMA devices. While this is a valuable security step and a necessary measure to protect our customers, it’s equally important to clarify that this does not change the established End-of-Support (EOS) timeline. IMPORTANT: SonicWall strongly recommends that users of the SMA 100 series products (SMA 210, 410, and 500v) upgrade to the 10.2.2.2-
• 9.8CriticalJul 29, 2025SonicWall SonicOSCVE-2025-40600Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.
• 6.1MediumJul 23, 2025SonicWall SMA 100 Series XSSCVE-2025-40598A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code.46% likelyDetection
• 7.5HighJul 23, 2025SonicWall SMA 100 Series Memory corruptionCVE-2025-40597A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution.23% likelyDetection

See every SonicWall entry on the dashboard.

Top products

• SonicOS10 CVEs in the last year
• Email Security7 CVEs in the last year
• SMA10006 CVEs in the last year, 1 critical
• GMS6 CVEs in the last year, 2 critical
• Network Security Manager (NSM)5 CVEs in the last year, 3 critical
• SMA1000 Appliances4 CVEs in the last year, 2 critical, 4 exploited
• sma6210 firmware2 CVEs in the last year
• NetExtender2 CVEs in the last year
• SMA1000 appliance1 CVE in the last year, 1 exploited
• SMA1001 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• CISA · Oct 20, 2026#StopRansomware: SafePay RansomwareCVE-2024-40766
• CCCS (Canada) · Oct 15, 2026SonicWall security advisory (AV26-1048)ADV-cccs-2ec6ecc70dc2
• SonicWall PSIRT · Oct 14, 2026SonicWall NSM On-Prem Affected By Multiple VulnerabilitiesCVE-2026-100232CVE-2026-96540
• SonicWall PSIRT · Oct 6, 2026SonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesCVE-2026-102255CVE-2026-102256CVE-2026-102257CVE-2026-102258
• SonicWall PSIRT · Sep 3, 2026SonicWall NSM On-Prem Affected By Multiple VulnerabilitiesCVE-2026-78327CVE-2026-78328CVE-2026-81939
• SonicWall PSIRT · Sep 1, 2026SonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesCVE-2026-83548CVE-2026-83549
• SonicWall PSIRT · Aug 25, 2026SonicWall NetExtender Linux Client Multiple VulnerabilitiesCVE-2026-66152CVE-2026-66153
• SonicWall PSIRT · Aug 11, 2026SonicWall Email Security Affected By Multiple VulnerabilitiesCVE-2026-66149CVE-2026-66150
• SonicWall PSIRT · Aug 11, 2026SonicWall GMS Security Affected By Multiple VulnerabilitiesCVE-2026-18634CVE-2026-66145CVE-2026-66146CVE-2026-66147CVE-2026-66148CVE-2026-66154
• SonicWall PSIRT · Aug 6, 2026SonicWall Global VPN Client (GVC) Out-of-bounds kernel memory read vulnerabilityCVE-2026-66151
• SonicWall PSIRT · Aug 5, 2026SonicOS Improper Neutralization of HTTP Headers VulnerabilityCVE-2026-0516
• SonicWall PSIRT · Jul 14, 2026SonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesCVE-2026-15409CVE-2026-15410
• SonicWall PSIRT · Apr 29, 2026SonicOS affected by multiple vulnerabilitiesCVE-2026-0204CVE-2026-0205CVE-2026-0206
• SonicWall PSIRT · Apr 8, 2026SonicWall SMA1000 Series Appliances Affected By Multiple VulnerabilitiesCVE-2026-4112CVE-2026-4113CVE-2026-4114CVE-2026-4116
• SonicWall PSIRT · Mar 31, 2026SonicWall Email Security Affected By Multiple VulnerabilitiesCVE-2026-3468CVE-2026-3469CVE-2026-3470