---
title: "SonicWall: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/sonicwall/
description: "Every SonicWall vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (10), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# SonicWall: known exploited vulnerabilities

- 2026-09-02 [CVE-2026-83549](https://erroneo.us/security/cve/CVE-2026-83549/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances OS Command Injection Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-09-02 [CVE-2026-83548](https://erroneo.us/security/cve/CVE-2026-83548/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-07-14 [CVE-2026-15410](https://erroneo.us/security/cve/CVE-2026-15410/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Code Injection Vulnerability (due 2026-07-17; ransomware: Known)
- 2026-07-14 [CVE-2026-15409](https://erroneo.us/security/cve/CVE-2026-15409/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (due 2026-07-17; ransomware: Known)
- 2025-12-17 [CVE-2025-40602](https://erroneo.us/security/cve/CVE-2025-40602/index.md) SonicWall SMA1000 appliance: SonicWall SMA1000 Missing Authorization Vulnerability (due 2025-12-24; ransomware: Unknown)
- 2025-05-01 [CVE-2023-44221](https://erroneo.us/security/cve/CVE-2023-44221/index.md) SonicWall SMA100 Appliances: SonicWall SMA100 Appliances OS Command Injection Vulnerability (due 2025-05-22; ransomware: Unknown)
- 2025-04-16 [CVE-2021-20035](https://erroneo.us/security/cve/CVE-2021-20035/index.md) SonicWall SMA100 Appliances: SonicWall SMA100 Appliances OS Command Injection Vulnerability (due 2025-05-07; ransomware: Unknown)
- 2025-02-18 [CVE-2024-53704](https://erroneo.us/security/cve/CVE-2024-53704/index.md) SonicWall SonicOS: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability (due 2025-03-11; ransomware: Known)
- 2025-01-24 [CVE-2025-23006](https://erroneo.us/security/cve/CVE-2025-23006/index.md) SonicWall SMA1000 Appliances: SonicWall SMA1000 Appliances Deserialization Vulnerability (due 2025-02-14; ransomware: Known)
- 2024-09-09 [CVE-2024-40766](https://erroneo.us/security/cve/CVE-2024-40766/index.md) SonicWall SonicOS: SonicWall SonicOS Improper Access Control Vulnerability (due 2024-09-30; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/sonicwall/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt