SonicWall SonicOS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
74 matching records
- High7.2Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Netwo…Check if you run itEPSS 1.15%Oct 14, 2026
- High8.8An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote…Check if you run itEPSS 0.31%Oct 14, 2026
- UnknownSonicWall security advisory (AV26-1017) – Update 1Patch nowKEVEPSS 0.98%Oct 7, 2026
- High7.8SonicWall SMA1000 Appliances OS Command Injection VulnerabilityPatch nowKEVEPSS 9.89%Sep 1, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityPatch nowKEVEPSS 11.79%Jul 14, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.49%May 19, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.50%Apr 29, 2026
- Medium6.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.Check if you run itEPSS 0.39%Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.Check if you run itEPSS 0.38%Apr 29, 2026
- High7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.Check if you run itEPSS 0.42%Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Check if you run itEPSS 0.60%Apr 9, 2026
- High7.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.Check if you run itEPSS 0.36%Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Check if you run itEPSS 0.61%Apr 9, 2026
- Low3.8A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated a…Check if you run itEPSS 0.33%Mar 31, 2026
- Low2.7A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as…Check if you run itEPSS 0.39%Mar 31, 2026
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input d…Check if you run itEPSS 0.23%Mar 31, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.9A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.9A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium4.9Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.Check if you run itEPSS 0.37%Feb 24, 2026
- UnknownSonicWall SonicOS Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Feb 5, 2026
- UnknownSonicWall SonicOS Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)Patch nowKEVEPSS 1.03%Feb 5, 2026