Security Digest
SonicWall: known exploited vulnerabilities
10 SonicWall CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-02 | CVE-2026-83549 | SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2026-09-05 |
| 2026-09-02 | CVE-2026-83548 | SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-09-05 |
| 2026-07-14 | CVE-2026-15410 | SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Code Injection Vulnerability Ransomware | 2026-07-17 |
| 2026-07-14 | CVE-2026-15409 | SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability Ransomware | 2026-07-17 |
| 2025-12-17 | CVE-2025-40602 | SonicWall SMA1000 appliance SonicWall SMA1000 Missing Authorization Vulnerability | 2025-12-24 |
| 2025-05-01 | CVE-2023-44221 | SonicWall SMA100 Appliances SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-05-22 |
| 2025-04-16 | CVE-2021-20035 | SonicWall SMA100 Appliances SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-05-07 |
| 2025-02-18 | CVE-2024-53704 | SonicWall SonicOS SonicWall SonicOS SSLVPN Improper Authentication Vulnerability Ransomware | 2025-03-11 |
| 2025-01-24 | CVE-2025-23006 | SonicWall SMA1000 Appliances SonicWall SMA1000 Appliances Deserialization Vulnerability Ransomware | 2025-02-14 |
| 2024-09-09 | CVE-2024-40766 | SonicWall SonicOS SonicWall SonicOS Improper Access Control Vulnerability Ransomware | 2024-09-30 |