Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Netwo…EPSS 0.5%Oct 14, 2026
- High8.8An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote…EPSS 0.2%Oct 14, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Oct 9, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityKEVEPSS 9.9%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKEVEPSS 8.0%Sep 1, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityKEVEPSS 11.8%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityKEVEPSS 6.8%Jul 14, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.Apr 29, 2026
- Medium6.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.Apr 29, 2026
- High7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Apr 9, 2026
- High7.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Apr 9, 2026
- Low3.8A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated a…Mar 31, 2026
- Low2.7A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as…Mar 31, 2026
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input d…Mar 31, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.Mar 4, 2026
- Medium4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.Feb 24, 2026
- Medium4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.Feb 24, 2026
- Medium4.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.Feb 24, 2026
- Medium4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.Feb 24, 2026
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityKEVEPSS 2.8%Dec 17, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityKEVEPSS 23.4%Jan 23, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityKEVEPSS 95.1%Jan 9, 2025
41 records · page 1 of 2
PreviousNext