SonicWall known exploited vulnerabilities
The Beam CVE database tracks 19 known exploited vulnerabilities for SonicWall: 10 critical, 6 high and 3 medium severity. The newest is CVE-2026-83548, published Sep 1, 2026.
These are the SonicWall vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 19
- Critical
- 10
- Known exploited (CISA KEV)
- 19
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-83548
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
critical10.0ExploitedSep 1, 2026CVE-2026-83549
SonicWall SMA1000 Appliances OS Command Injection Vulnerability
high7.8ExploitedSep 1, 2026CVE-2026-15409
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
critical10.0ExploitedJul 14, 2026CVE-2026-15410
SonicWall SMA1000 Appliances Code Injection Vulnerability
high7.2ExploitedJul 14, 2026CVE-2025-40602
SonicWall SMA1000 Missing Authorization Vulnerability
medium6.6ExploitedDec 18, 2025CVE-2025-23006
SonicWall SMA1000 Appliances Deserialization Vulnerability
critical9.8ExploitedJan 23, 2025CVE-2024-53704
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
critical9.8ExploitedJan 9, 2025CVE-2024-40766
SonicWall SonicOS Improper Access Control Vulnerability
critical9.8ExploitedAug 23, 2024CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability
high7.2ExploitedDec 5, 2023CVE-2021-20038
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
critical9.8ExploitedDec 8, 2021CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability
medium6.5ExploitedSep 27, 2021CVE-2021-20028
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
critical9.8ExploitedAug 4, 2021CVE-2021-20023
SonicWall Email Security Path Traversal Vulnerability
medium4.9ExploitedApr 20, 2021CVE-2021-20021
SonicWall Email Security Improper Privilege Management Vulnerability
critical9.8ExploitedApr 9, 2021CVE-2021-20022
SonicWall Email Security Unrestricted Upload of File Vulnerability
high7.2ExploitedApr 9, 2021CVE-2021-20016
SonicWall SSLVPN SMA100 SQL Injection Vulnerability
critical9.8ExploitedFeb 4, 2021CVE-2020-5135
SonicWall SonicOS Buffer Overflow Vulnerability
critical9.8ExploitedOct 12, 2020CVE-2019-7483
SonicWall SMA100 Directory Traversal Vulnerability
high7.5ExploitedDec 19, 2019CVE-2019-7481
SonicWall SMA100 SQL Injection Vulnerability
high7.5ExploitedDec 17, 2019
