SonicWall SonicOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
74 matching records
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- High7.5SonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 0.91%Nov 20, 2025
- Medium5.3A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequeCheck if you run itEPSS 0.36%Nov 20, 2025
- Medium6.5Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers withCheck if you run itEPSS 0.21%Nov 20, 2025
- Medium4.5A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view pCheck if you run itEPSS 0.48%Oct 31, 2025
- Critical9.8SonicWall SonicOS Use of Externally-Controlled Format StringPatch nowKEVEPSS 0.98%Jul 29, 2025
- Medium6.1A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScriCheck this weekEPSS 46.15%Jul 23, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface.Check if you run itEPSS 0.36%May 14, 2025
- High7.1A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the aCheck this weekEPSS 23.45%May 7, 2025
- High8.8SonicWall SMA 100 Appliances Files or Directories Accessible to External PartiesPatch nowKEVEPSS 6.45%May 7, 2025
- High7.2A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remoteCheck if you run itEPSS 0.34%Apr 30, 2025
- High7.5SonicWall SonicOS NULL Pointer DereferencePatch nowKEVEPSS 0.84%Apr 23, 2025
- Medium6.1A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading tCheck if you run itEPSS 0.35%Apr 16, 2025
- Critical9.8SonicWall SMA1000 Appliances Deserialization VulnerabilityPatch nowKEVEPSS 26.56%Jan 22, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityPatch nowKEVEPSS 95.31%Jan 9, 2025
- UnknownSonicWall scrutinizer Improper AuthenticationPatch nowKEVEPSS 44.46%Oct 1, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 41.32%Sep 12, 2024
- UnknownSonicWall SonicOS Stack-based Buffer OverflowPatch nowKEVEPSS 75.52%Sep 12, 2024
- Critical9.0RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challen…Check this weekEPSS 14.86%Jul 9, 2024
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityPatch nowKEVEPSS 99.96%Jul 1, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- Critical9.8SonicWall SonicOS Improper Access Control VulnerabilityPatch nowKEVEPSS 18.38%Apr 23, 2024
- UnknownSonicWall sma_200_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 78.75%Mar 30, 2024
- High8.8SonicWall sma_200_firmware Improper AuthenticationPatch nowKEVEPSS 0.91%Dec 5, 2023
- High7.2SonicWall SMA100 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 76.25%Dec 5, 2023