# SonicWall vulnerabilities > SonicWall has 203 published vulnerabilities across 331 products in our catalogue. 19 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is SonicOS, with 59. If you run SonicWall software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/sonicwall ## At a glance - **Published vulnerabilities:** 203 - **Known to be exploited:** 19 - **Products:** 331 - **Versions:** 438 - **Most recently added to the known-exploited list:** [CVE-2026-15409](https://www.precursorintelligence.com/what-is/cve-2026-15409), 14 July 2026. We keep watching the list. ## Which SonicWall products have the most vulnerabilities? - [SonicOS](https://www.precursorintelligence.com/product/sonicwall/sonicos): 59 published vulnerabilities, 117 versions - [Global Management System](https://www.precursorintelligence.com/product/sonicwall/global_management_system): 32 published vulnerabilities, 20 versions - [Sma 410 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_410_firmware): 30 published vulnerabilities, 19 versions - [Sma 210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_210_firmware): 30 published vulnerabilities, 19 versions - [Tz570w](https://www.precursorintelligence.com/product/sonicwall/tz570w): 28 published vulnerabilities, 0 versions - [Tz370w](https://www.precursorintelligence.com/product/sonicwall/tz370w): 28 published vulnerabilities, 0 versions - [Sma 410](https://www.precursorintelligence.com/product/sonicwall/sma_410): 28 published vulnerabilities, 0 versions - [Sma 500v](https://www.precursorintelligence.com/product/sonicwall/sma_500v): 28 published vulnerabilities, 8 versions - [Sma 210](https://www.precursorintelligence.com/product/sonicwall/sma_210): 28 published vulnerabilities, 0 versions - [Tz370](https://www.precursorintelligence.com/product/sonicwall/tz370): 28 published vulnerabilities, 0 versions Each product page lists its own known-exploited flaws. ## Which SonicWall vulnerabilities are being exploited? 19 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-15409](https://www.precursorintelligence.com/what-is/cve-2026-15409): SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability. Critical, CVSS 10.0, chance of use in 30 days 6.8%, known exploited since 14 July 2026. - [CVE-2026-15410](https://www.precursorintelligence.com/what-is/cve-2026-15410): SonicWall SMA1000 Appliances Code Injection Vulnerability. High, CVSS 7.2, chance of use in 30 days 12%, known exploited since 14 July 2026. - [CVE-2023-44221](https://www.precursorintelligence.com/what-is/cve-2023-44221): SonicWall SMA100 Appliances OS Command Injection Vulnerability. High, CVSS 7.2, chance of use in 30 days 76%, known exploited since 1 May 2025. - [CVE-2021-20035](https://www.precursorintelligence.com/what-is/cve-2021-20035): SonicWall SMA100 Appliances OS Command Injection Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 4.2%, known exploited since 16 April 2025. - [CVE-2024-53704](https://www.precursorintelligence.com/what-is/cve-2024-53704): SonicWall SonicOS SSLVPN Improper Authentication Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 18 February 2025. - [CVE-2025-23006](https://www.precursorintelligence.com/what-is/cve-2025-23006): SonicWall SMA1000 Appliances Deserialization Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 23%, known exploited since 24 January 2025. - [CVE-2024-40766](https://www.precursorintelligence.com/what-is/cve-2024-40766): SonicWall SonicOS Improper Access Control Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 18%, known exploited since 9 September 2024. - [CVE-2021-45046](https://www.precursorintelligence.com/what-is/cve-2021-45046): Apache Log4j2 Deserialization of Untrusted Data Vulnerability. Critical, CVSS 9.0, chance of use in 30 days >99%, known exploited since 1 May 2023. - [CVE-2022-0847](https://www.precursorintelligence.com/what-is/cve-2022-0847): Linux Kernel Privilege Escalation Vulnerability. High, CVSS 7.8, chance of use in 30 days 93%, known exploited since 25 April 2022. - [CVE-2021-20028](https://www.precursorintelligence.com/what-is/cve-2021-20028): SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 30%, known exploited since 28 March 2022. - [CVE-2019-7483](https://www.precursorintelligence.com/what-is/cve-2019-7483): SonicWall SMA100 Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 4.0%, known exploited since 28 March 2022. - [CVE-2020-5135](https://www.precursorintelligence.com/what-is/cve-2020-5135): SonicWall SonicOS Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 27%, known exploited since 15 March 2022. - [CVE-2021-20038](https://www.precursorintelligence.com/what-is/cve-2021-20038): SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022. - [CVE-2021-44228](https://www.precursorintelligence.com/what-is/cve-2021-44228): Apache Log4j2 Remote Code Execution Vulnerability. Critical, CVSS 10.0, chance of use in 30 days >99%, known exploited since 10 December 2021. - [CVE-2021-20021](https://www.precursorintelligence.com/what-is/cve-2021-20021): SonicWall Email Security Improper Privilege Management Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 89%, known exploited since 3 November 2021. - [CVE-2021-20016](https://www.precursorintelligence.com/what-is/cve-2021-20016): SonicWall SSLVPN SMA100 SQL Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 40%, known exploited since 3 November 2021. - [CVE-2019-7481](https://www.precursorintelligence.com/what-is/cve-2019-7481): SonicWall SMA100 SQL Injection Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2021-20022](https://www.precursorintelligence.com/what-is/cve-2021-20022): SonicWall Email Security Unrestricted Upload of File Vulnerability. High, CVSS 7.2, chance of use in 30 days 17%, known exploited since 3 November 2021. - [CVE-2021-20023](https://www.precursorintelligence.com/what-is/cve-2021-20023): SonicWall Email Security Path Traversal Vulnerability. Medium, CVSS 4.9, chance of use in 30 days 52%, known exploited since 3 November 2021. ## Which SonicWall flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2021-45105](https://www.precursorintelligence.com/what-is/cve-2021-45105): >99%, Medium (CVSS 5.9) - [CVE-2021-45046](https://www.precursorintelligence.com/what-is/cve-2021-45046): >99%, Critical (CVSS 9.0), known exploited - [CVE-2021-20038](https://www.precursorintelligence.com/what-is/cve-2021-20038): >99%, Critical (CVSS 9.8), known exploited - [CVE-2019-7481](https://www.precursorintelligence.com/what-is/cve-2019-7481): >99%, High (CVSS 7.5), known exploited - [CVE-2024-6387](https://www.precursorintelligence.com/what-is/cve-2024-6387): >99%, High (CVSS 8.1) - [CVE-2024-53704](https://www.precursorintelligence.com/what-is/cve-2024-53704): 95%, Critical (CVSS 9.8), known exploited - [CVE-2022-0847](https://www.precursorintelligence.com/what-is/cve-2022-0847): 93%, High (CVSS 7.8), known exploited - [CVE-2013-1359](https://www.precursorintelligence.com/what-is/cve-2013-1359): 89%, Critical (CVSS 9.8) - [CVE-2021-20021](https://www.precursorintelligence.com/what-is/cve-2021-20021): 89%, Critical (CVSS 9.8), known exploited ## All SonicWall products we track 94 products with at least one tracked version, most vulnerabilities first: - [SonicOS](https://www.precursorintelligence.com/product/sonicwall/sonicos): 59 vulnerabilities, 117 versions - [Global Management System](https://www.precursorintelligence.com/product/sonicwall/global_management_system): 32 vulnerabilities, 20 versions - [Sma 410 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_410_firmware): 30 vulnerabilities, 19 versions - [Sma 210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_210_firmware): 30 vulnerabilities, 19 versions - [Sma 500v](https://www.precursorintelligence.com/product/sonicwall/sma_500v): 28 vulnerabilities, 8 versions - [Sma 500v Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_500v_firmware): 27 vulnerabilities, 16 versions - [Sma 200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_200_firmware): 22 vulnerabilities, 14 versions - [Sma 400 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_400_firmware): 22 vulnerabilities, 14 versions - [Sonicosv](https://www.precursorintelligence.com/product/sonicwall/sonicosv): 19 vulnerabilities, 7 versions - [Analytics](https://www.precursorintelligence.com/product/sonicwall/analytics): 17 vulnerabilities, 3 versions - [Sma 100 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_100_firmware): 13 vulnerabilities, 11 versions - [Analyzer](https://www.precursorintelligence.com/product/sonicwall/analyzer): 10 vulnerabilities, 8 versions - [Email Security](https://www.precursorintelligence.com/product/sonicwall/email_security): 10 vulnerabilities, 1 version - [Netextender](https://www.precursorintelligence.com/product/sonicwall/netextender): 9 vulnerabilities, 13 versions - [Scrutinizer](https://www.precursorintelligence.com/product/sonicwall/scrutinizer): 7 vulnerabilities, 8 versions - [Global VPN Client](https://www.precursorintelligence.com/product/sonicwall/global_vpn_client): 6 vulnerabilities, 5 versions - [Sma1000 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma1000_firmware): 5 vulnerabilities, 5 versions - [Sma100 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma100_firmware): 5 vulnerabilities, 5 versions - [Tz300p Firmware](https://www.precursorintelligence.com/product/sonicwall/tz300p_firmware): 4 vulnerabilities, 1 version - [Tz300w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz300w_firmware): 4 vulnerabilities, 1 version - [Tz350 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz350_firmware): 4 vulnerabilities, 1 version - [Tz350w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz350w_firmware): 4 vulnerabilities, 1 version - [Tz370 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz370_firmware): 4 vulnerabilities, 1 version - [Tz370w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz370w_firmware): 4 vulnerabilities, 1 version - [Tz400 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz400_firmware): 4 vulnerabilities, 1 version - [Tz400w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz400w_firmware): 4 vulnerabilities, 1 version - [Tz470 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz470_firmware): 4 vulnerabilities, 1 version - [Tz470w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz470w_firmware): 4 vulnerabilities, 1 version - [Tz500 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz500_firmware): 4 vulnerabilities, 1 version - [Tz500w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz500w_firmware): 4 vulnerabilities, 1 version - [Tz570 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz570_firmware): 4 vulnerabilities, 1 version - [Tz570p Firmware](https://www.precursorintelligence.com/product/sonicwall/tz570p_firmware): 4 vulnerabilities, 1 version - [Tz570w Firmware](https://www.precursorintelligence.com/product/sonicwall/tz570w_firmware): 4 vulnerabilities, 1 version - [Tz600 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz600_firmware): 4 vulnerabilities, 1 version - [Tz600p Firmware](https://www.precursorintelligence.com/product/sonicwall/tz600p_firmware): 4 vulnerabilities, 1 version - [Tz670 Firmware](https://www.precursorintelligence.com/product/sonicwall/tz670_firmware): 4 vulnerabilities, 1 version - [Nsa 9650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_9650_firmware): 3 vulnerabilities, 1 version - [Nsa 9450 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_9450_firmware): 3 vulnerabilities, 1 version - [Nsa 9250 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_9250_firmware): 3 vulnerabilities, 1 version - [Nsa 6700 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_6700_firmware): 3 vulnerabilities, 1 version - [Nsa 6650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_6650_firmware): 3 vulnerabilities, 1 version - [Nsa 5700 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_5700_firmware): 3 vulnerabilities, 1 version - [Nsa 5650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_5650_firmware): 3 vulnerabilities, 1 version - [Nsa 4700 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_4700_firmware): 3 vulnerabilities, 1 version - [Nsa 4650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_4650_firmware): 3 vulnerabilities, 1 version - [Sma 6200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_6200_firmware): 3 vulnerabilities, 2 versions - [Sma 6210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_6210_firmware): 3 vulnerabilities, 2 versions - [Sma 7200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_7200_firmware): 3 vulnerabilities, 2 versions - [Sma 7210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_7210_firmware): 3 vulnerabilities, 2 versions - [Sma 8000v Firmware](https://www.precursorintelligence.com/product/sonicwall/sma_8000v_firmware): 3 vulnerabilities, 2 versions - [Nsa 3700 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_3700_firmware): 3 vulnerabilities, 1 version - [Nsa 3650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_3650_firmware): 3 vulnerabilities, 1 version - [Nsa 2700 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_2700_firmware): 3 vulnerabilities, 1 version - [Nsa 2650 Firmware](https://www.precursorintelligence.com/product/sonicwall/nsa_2650_firmware): 3 vulnerabilities, 1 version - [Uma Em5000 Firmware](https://www.precursorintelligence.com/product/sonicwall/uma_em5000_firmware): 3 vulnerabilities, 3 versions - [Email Security Appliance](https://www.precursorintelligence.com/product/sonicwall/email_security_appliance): 3 vulnerabilities, 3 versions - [Capture Client](https://www.precursorintelligence.com/product/sonicwall/capture_client): 3 vulnerabilities, 2 versions - [Sra 1600 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_1600_firmware): 2 vulnerabilities, 2 versions - [Network Security Manager](https://www.precursorintelligence.com/product/sonicwall/network_security_manager): 2 vulnerabilities, 1 version - [Sra 4200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_4200_firmware): 2 vulnerabilities, 1 version - [Viewpoint](https://www.precursorintelligence.com/product/sonicwall/viewpoint): 2 vulnerabilities, 3 versions - [Sra 4600 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_4600_firmware): 2 vulnerabilities, 2 versions - [Soho Firmware](https://www.precursorintelligence.com/product/sonicwall/soho_firmware): 2 vulnerabilities, 4 versions - [Directory Services Connector](https://www.precursorintelligence.com/product/sonicwall/directory_services_connector): 2 vulnerabilities, 1 version - [Universal Management Appliance](https://www.precursorintelligence.com/product/sonicwall/universal_management_appliance): 2 vulnerabilities, 3 versions - [Soho Firewall](https://www.precursorintelligence.com/product/sonicwall/soho_firewall): 2 vulnerabilities, 2 versions - [Sra 1200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_1200_firmware): 2 vulnerabilities, 1 version - [Sra Ex9000 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_ex9000_firmware): 1 vulnerability, 1 version - [Sra Va Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_va_firmware): 1 vulnerability, 2 versions - SSL-VPN End-Point Interrogator/installer Activex Control: 1 vulnerability, 1 version - [Uma E5000 Firmware](https://www.precursorintelligence.com/product/sonicwall/uma_e5000_firmware): 1 vulnerability, 2 versions - [Tele2](https://www.precursorintelligence.com/product/sonicwall/tele2): 1 vulnerability, 1 version - [Email Security Virtual Appliance](https://www.precursorintelligence.com/product/sonicwall/email_security_virtual_appliance): 1 vulnerability, 4 versions - [E-Mail Security](https://www.precursorintelligence.com/product/sonicwall/e-mail_security): 1 vulnerability, 1 version - [Pro300](https://www.precursorintelligence.com/product/sonicwall/pro300): 1 vulnerability, 1 version - [Sma8200v](https://www.precursorintelligence.com/product/sonicwall/sma8200v): 1 vulnerability, 7 versions - [Soho2](https://www.precursorintelligence.com/product/sonicwall/soho2): 1 vulnerability, 1 version - [Remote Access Firmware](https://www.precursorintelligence.com/product/sonicwall/remote_access_firmware): 1 vulnerability, 6 versions - [Soho3](https://www.precursorintelligence.com/product/sonicwall/soho3): 1 vulnerability, 1 version - [Sonicos Enhanced](https://www.precursorintelligence.com/product/sonicwall/sonicos_enhanced): 1 vulnerability, 1 version - [Sonicos Sslvpn Nacagent](https://www.precursorintelligence.com/product/sonicwall/sonicos_sslvpn_nacagent): 1 vulnerability, 1 version - [Sra Ex6000 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_ex6000_firmware): 1 vulnerability, 1 version - [Sra Ex7000 Firmware](https://www.precursorintelligence.com/product/sonicwall/sra_ex7000_firmware): 1 vulnerability, 1 version - [Sma6200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma6200_firmware): 1 vulnerability, 7 versions - [Sma6210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma6210_firmware): 1 vulnerability, 7 versions - [Pro100](https://www.precursorintelligence.com/product/sonicwall/pro100): 1 vulnerability, 1 version - [Sma7200 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma7200_firmware): 1 vulnerability, 7 versions - [Pro200](https://www.precursorintelligence.com/product/sonicwall/pro200): 1 vulnerability, 1 version - [Sma7210 Firmware](https://www.precursorintelligence.com/product/sonicwall/sma7210_firmware): 1 vulnerability, 7 versions - [Aventail Web Proxy Agent](https://www.precursorintelligence.com/product/sonicwall/aventail_web_proxy_agent): 0 vulnerabilities, 3 versions - [Aventail Webifiers](https://www.precursorintelligence.com/product/sonicwall/aventail_webifiers): 0 vulnerabilities, 3 versions - [Netextender Firmware](https://www.precursorintelligence.com/product/sonicwall/netextender_firmware): 0 vulnerabilities, 4 versions - [Aventail Opswat End Point Control](https://www.precursorintelligence.com/product/sonicwall/aventail_opswat_end_point_control): 0 vulnerabilities, 1 version - [Aventail Access Manager](https://www.precursorintelligence.com/product/sonicwall/aventail_access_manager): 0 vulnerabilities, 3 versions ## Questions ### How many vulnerabilities does SonicWall have? Our catalogue lists 203 published vulnerabilities across 331 products and 438 versions from SonicWall. The most recent SonicWall flaw added to the known-exploited list is CVE-2026-15409, on 14 July 2026. ### Which SonicWall vulnerabilities are being exploited? 19 SonicWall vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-15409, CVE-2026-15410 and CVE-2023-44221. The full list is on this page. ### Which SonicWall product has the most vulnerabilities? SonicOS, with 59 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new SonicWall vulnerabilities? Create a Precursor Intelligence account and track the SonicWall products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running SonicWall? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact