SonicWall vulnerabilities19 known to be exploited.
SonicWall has 203 published vulnerabilities across 331 products in our catalogue. 19 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is SonicOS, with 59. If you run SonicWall software, patch the exploited flaws first.
The most recent SonicWall flaw added to the known-exploited list is CVE-2026-15409, on 14 July 2026. We keep watching the known-exploited list.
Which SonicWall products have the most vulnerabilities?
SonicOS leads with 59 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which SonicWall vulnerabilities are being exploited?
19 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 10.0SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.
- 7.2SonicWall SMA1000 Appliances Code Injection Vulnerability
SonicWall SMA1000 Appliances contain a code injection vulnerability which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
- 7.2SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall SMA100 appliances contain an OS command injection vulnerability in the SSL-VPN management interface that allows a remote, authenticated attacker with administrative privilege to inject arbitrary commands as...
- 6.5SonicWall SMA100 Appliances OS Command Injection Vulnerability
SonicWall SMA100 appliances contain an OS command injection vulnerability in the management interface that allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user, which could...
- 9.8SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication.
- 9.8SonicWall SMA1000 Appliances Deserialization Vulnerability
SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute...
- 9.8SonicWall SonicOS Improper Access Control Vulnerability
SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.
- 9.0Apache Log4j2 Deserialization of Untrusted Data Vulnerability
Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain...
Which SonicWall flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%CVE-2021-45105Medium
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
- >99%
It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations.
- >99%
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance.
- >99%
Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources.
- >99%CVE-2024-6387High
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
- 95%
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
- 93%
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values.
- 89%CVE-2013-1359Critical
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (UMA) 5.1, 6.0, and 7.0 and ViewPoint 4.1, 5.0,...
- 89%
A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host.
All SonicWall products we track.
94 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- SonicOSsonicos59 vulnerabilities117 versions
- Global Management Systemglobal_management_system32 vulnerabilities20 versions
- Sma 210 Firmwaresma_210_firmware30 vulnerabilities19 versions
- Sma 410 Firmwaresma_410_firmware30 vulnerabilities19 versions
- Sma 500vsma_500v28 vulnerabilities8 versions
- Sma 500v Firmwaresma_500v_firmware27 vulnerabilities16 versions
- Sma 200 Firmwaresma_200_firmware22 vulnerabilities14 versions
- Sma 400 Firmwaresma_400_firmware22 vulnerabilities14 versions
- Sonicosvsonicosv19 vulnerabilities7 versions
- Analyticsanalytics17 vulnerabilities3 versions
- Sma 100 Firmwaresma_100_firmware13 vulnerabilities11 versions
- Analyzeranalyzer10 vulnerabilities8 versions
- Email Securityemail_security10 vulnerabilities1 version
- Netextendernetextender9 vulnerabilities13 versions
- Scrutinizerscrutinizer7 vulnerabilities8 versions
- Global VPN Clientglobal_vpn_client6 vulnerabilities5 versions
- Sma100 Firmwaresma100_firmware5 vulnerabilities5 versions
- Sma1000 Firmwaresma1000_firmware5 vulnerabilities5 versions
- Tz300p Firmwaretz300p_firmware4 vulnerabilities1 version
- Tz300w Firmwaretz300w_firmware4 vulnerabilities1 version
- Tz350 Firmwaretz350_firmware4 vulnerabilities1 version
- Tz350w Firmwaretz350w_firmware4 vulnerabilities1 version
- Tz370 Firmwaretz370_firmware4 vulnerabilities1 version
- Tz370w Firmwaretz370w_firmware4 vulnerabilities1 version
This directory lists the 94 SonicWall products with at least one tracked version, of 331 in our catalogue.
Running SonicWall? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
SonicWall SMA1000 Appliances contain a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to potentially cause the appliance to make requests to unintended location.
- Matched to
- Sma100 on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 203 published vulnerabilities across 331 products and 438 versions from SonicWall. The most recent SonicWall flaw added to the known-exploited list is CVE-2026-15409, on 14 July 2026.
19 SonicWall vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-15409, CVE-2026-15410 and CVE-2023-44221. The full list is on this page.
SonicOS, with 59 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the SonicWall products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.