SonicWall SonicOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
48 matching records
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.98%Oct 7, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.49%May 19, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Feb 5, 2026
- UnknownSonicWall SonicOS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.03%Feb 5, 2026
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- High7.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.91%Nov 20, 2025
- Critical9.8SonicWall SonicOS Use of Externally-Controlled Format StringPatch nowKEVEPSS 0.98%Jul 29, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityPatch nowKEVEPSS 26.56%Jan 22, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityPatch nowKEVEPSS 95.31%Jan 9, 2025
- UnknownSonicWall scrutinizer Improper AuthenticationPatch nowKEVEPSS 44.46%Oct 1, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 41.32%Sep 12, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 75.52%Sep 12, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Critical9.8SonicWall SonicOS Improper Access Control VulnerabilityPatch nowKEVEPSS 18.38%Apr 23, 2024
- UnknownSonicWall sma_200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.75%Mar 30, 2024
- High8.8SonicWall sma_200_firmware Improper AuthenticationPatch nowKEVEPSS 0.91%Dec 5, 2023
- High7.2SonicWall SMA100 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 76.25%Dec 5, 2023
- UnknownSonicWall analytics Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 72.77%Nov 16, 2023