SonicWall — security advisories

35 advisories25 exploitedlatest 2026-08-17⚡ RSS feed

Tracked SonicWall products:

SMA1000 SMA100 Appliances SonicOS SMA1000 Appliances SMA100 Secure Remote Access SMA 100 Appliances SSLVPN SMA100 Email Security SMA1000 Series SMA Secure Mobile Access 1000 Secure Mobile Access Global VPN Client GMS

⚡ Watch SonicWall

Get an email when a new SonicWall advisory drops — max one per day, one-click unsubscribe.

[NEW] [medium] SonicWall Email Security: Multiple Vulnerabilities Enable Execution of Arbitrary Code with Administrator Rights

mediumCVE-2026-66149 CVE-2026-66150cert-bund2026-08-17

SonicWall security advisory (AV26-809)

unknowncccs2026-08-12

[NEW] [high] SonicWall GMS: Multiple Vulnerabilities

highCVE-2026-18634 CVE-2026-66145 CVE-2026-66146 CVE-2026-66147cert-bund2026-08-12

Multiple vulnerabilities in SonicWall products (August 12, 2026)

unknownCVE-2026-66150 CVE-2026-66154 CVE-2026-66148 CVE-2026-66149cert-fr-avis2026-08-12

[NEW] [medium] SonicWall Global VPN Client: Vulnerability enables denial of service

mediumCVE-2026-66151cert-bund2026-08-10

Vulnerability in SonicWall Global VPN Client (August 10, 2026)

unknownCVE-2026-66151cert-fr-avis2026-08-10

[NEW] [low] SonicWall SonicOS: Vulnerability Enables Information Disclosure

lowCVE-2026-0516cert-bund2026-08-06

Vulnerability in Sonicwall SonicOS (August 6, 2026)

unknownCVE-2026-0516cert-fr-avis2026-08-06

[NEW] [critical] SonicWall SMA: Multiple vulnerabilities

criticalCVE-2026-15409 CVE-2026-15410cert-bund2026-07-15

NCSC-2026-0239 [1.00] [H/H] Zero-Day vulnerabilities fixed in SonicWall SMA1000

unknownexploitedCVE-2026-15409 CVE-2026-15410ncsc-nl2026-07-15

SonicWall SMA1000 Series Products Multiple Vulnerabilities

unknownCVE-2026-15409 CVE-2026-15410hkcert2026-07-15

Multiple vulnerabilities in Secure Mobile Access (July 15, 2026)

unknownexploitedCVE-2026-15409cert-fr-alerte2026-07-15

Multiple vulnerabilities in Sonicwall Secure Mobile Access 1000 (July 15, 2026)

unknownexploitedCVE-2026-15409cert-fr-avis2026-07-15

SonicWall security advisory (AV26-699) – Update 1

criticalexploitedCVE-2026-15409 CVE-2026-15410cccs2026-07-14

CVE-2026-15410: Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific

highexploitedCVSS 7.2CVE-2026-15410nvd2026-07-14

CVE-2026-15409: A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the

criticalexploitedCVSS 10CVE-2026-15409nvd2026-07-14

CVE-2026-15409: SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

criticalexploitedCVE-2026-15409cisa-kev2026-07-14

CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability

criticalexploitedCVE-2026-15410cisa-kev2026-07-14

CVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability

criticalexploitedCVE-2025-40602cisa-kev2025-12-17

Security incidents in SonicWall firewalls (August 5, 2025)

unknownexploitedCVE-2024-40766cert-fr-alerte2025-08-05

CVE-2023-44221: SonicWall SMA100 Appliances OS Command Injection Vulnerability

criticalexploitedCVE-2023-44221cisa-kev2025-05-01

CVE-2021-20035: SonicWall SMA100 Appliances OS Command Injection Vulnerability

criticalexploitedCVE-2021-20035cisa-kev2025-04-16

CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

criticalexploitedCVE-2024-53704cisa-kev2025-02-18

CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability

criticalexploitedCVE-2025-23006cisa-kev2025-01-24

Vulnerability in SonicWall (September 10, 2024)

unknownexploitedCVE-2024-40766cert-fr-alerte2024-09-10

CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability

criticalexploitedCVE-2024-40766cisa-kev2024-09-09

CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

criticalexploitedCVE-2021-20028cisa-kev2022-03-28

CVE-2019-7483: SonicWall SMA100 Directory Traversal Vulnerability

criticalexploitedCVE-2019-7483cisa-kev2022-03-28

CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability

criticalexploitedCVE-2020-5135cisa-kev2022-03-15

CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

criticalexploitedCVE-2021-20038cisa-kev2022-01-28

CVE-2021-20022: SonicWall Email Security Unrestricted Upload of File Vulnerability

criticalexploitedCVE-2021-20022cisa-kev2021-11-03

CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerability

criticalexploitedCVE-2021-20021cisa-kev2021-11-03

CVE-2021-20023: SonicWall Email Security Path Traversal Vulnerability

criticalexploitedCVE-2021-20023cisa-kev2021-11-03

CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability

criticalexploitedCVE-2021-20016cisa-kev2021-11-03

CVE-2019-7481: SonicWall SMA100 SQL Injection Vulnerability

criticalexploitedCVE-2019-7481cisa-kev2021-11-03