Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution VulnerabilityEPSS 0.7%Oct 15, 2026
- High7.2Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Netwo…EPSS 1.2%Oct 14, 2026
- High8.8An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote…EPSS 0.2%Oct 14, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1KEVEPSS 0.5%Oct 7, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityKEVEPSS 9.9%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKEVEPSS 8.0%Sep 1, 2026
- UnknownSonicWall analytics Use of Password Hash Instead of Password for AuthenticationKEVAug 26, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityKEVEPSS 11.8%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKEVEPSS 6.8%Jul 14, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessKEVMay 19, 2026
- UnknownSonicWall SonicOS Use of Externally-Controlled Format StringKEVMay 10, 2026
- UnknownSonicWall SonicOS NULL Pointer DereferenceKEVMay 10, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.EPSS 0.5%Apr 29, 2026
- Medium6.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.EPSS 0.4%Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.EPSS 0.4%Apr 29, 2026
- High7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Apr 9, 2026
- High7.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Apr 9, 2026
- Low3.8A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated a…Mar 31, 2026
- Low2.7A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as…Mar 31, 2026
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input d…Mar 31, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.Mar 4, 2026
- Medium4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.EPSS 0.4%Feb 24, 2026
- Medium4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.EPSS 0.4%Feb 24, 2026
62 records · page 1 of 3
PreviousNext