SonicWall SonicOS security vulnerabilities
Firewall. Public CVE monitoring for SonicWall SonicOS. Vendor security advisories are linked on this page.
Built for Operators of this product.
74 public records · 0 security-fix timeline events. 0 published in the last 7 days. 38 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 1
- High 3
- Medium 0
- Low 0
2026-08-054 issues2026-11-02
Known exploited
View all known exploited- Critical9.8windriver vxworks Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 75.25%Aug 9, 2019
- Critical9.8SonicWall analytics Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 50.48%Jul 13, 2023
- High8.8SonicWall sma_210_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 13.04%Jun 8, 2022
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Critical9.8SonicWall analytics Use of Password Hash Instead of Password for AuthenticationPatch nowKEVEPSS 7.74%Jul 13, 2023
- High8.8SonicWall sma_200_firmware Heap-based Buffer OverflowPatch nowKEVEPSS 6.87%Aug 26, 2022
Recently published
Browse catalog- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.50%Apr 29, 2026
- Medium6.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.Check if you run itEPSS 0.39%Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.Check if you run itEPSS 0.38%Apr 29, 2026
- High7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.Check if you run itEPSS 0.42%Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Check if you run itEPSS 0.60%Apr 9, 2026
- High7.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.Check if you run itEPSS 0.36%Apr 9, 2026