Vendor
SonicWall vulnerabilities under active attack
17 SonicWall vulnerabilities have confirmed evidence of exploitation in the wild, and 10 are used in ransomware campaigns.
17
confirmed exploited
10
used in ransomware
17
past fix deadline
- CVE-2026-15409 SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability SonicWall · SMA1000 Appliances
- CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability SonicWall · SMA1000 Appliances
- CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability SonicWall · SMA1000 appliance
- CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability SonicWall · SMA100 Appliances
- CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability SonicWall · SonicOS
- CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability SonicWall · SMA1000 Appliances
- CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability SonicWall · SonicOS
- CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability SonicWall · Secure Remote Access (SRA)
- CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability SonicWall · SMA100
- CVE-2020-5135 SonicWall SonicOS Buffer Overflow Vulnerability SonicWall · SonicOS
- CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability SonicWall · SMA 100 Appliances
- CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability SonicWall · SonicWall Email Security
- CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability SonicWall · SMA100
- CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20023 SonicWall Email Security Path Traversal Vulnerability SonicWall · SonicWall Email Security
- CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability SonicWall · SSLVPN SMA100