Skip to content
Sonicwall vulnerabilities
Products
Show 84 moreShow less
Newest
-
sonicwall sonicos
A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in...
CVE-2026-19703
5.1 Medium
-
sonicwall sonicos
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS...
CVE-2026-77709
5.9 Medium
-
sonicwall sonicos
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS...
CVE-2026-77708
5.9 Medium
-
sonicwall sonicos, sonicos sslvpn +1 more
An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid...
CVE-2026-19868
In KEVPublic exploit
7.5 High
-
sonicwall sonicos
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS...
CVE-2026-82308
7.5 High
-
sonicwall sonicos
A session validation vulnerability has been identified in the SonicOS management interface, which...
CVE-2026-107154
8.8 High
-
sonicwall sonicos
A permissive cross-domain policy vulnerability has been identified in the SonicOS management...
CVE-2026-107155
8.8 High
-
sonicwall global management system (gms)
Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL...
CVE-2026-109594
6.8 Medium
-
sonicwall global management system (gms)
An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions...
CVE-2026-109593
9.1 Critical
-
sonicwall network security manager (nsm)
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-100232
7.2 High
-
sonicwall network security manager (nsm)
An improper access control vulnerability has been identified in the SonicWall Network Security...
CVE-2026-96540
8.8 High
-
sonicwall sma1000
Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the...
CVE-2026-102258
Public exploit
6.1 Medium
-
sonicwall sma1000
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface...
CVE-2026-102257
Public exploit
7.2 High
-
sonicwall sma1000
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-102256
Public exploit
7.8 High
-
sonicwall sma1000
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
CVE-2026-102255
Public exploit
10.0 Critical
-
sonicwall network security manager (nsm)
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and...
CVE-2026-81939
9.1 Critical
-
sonicwall network security manager (nsm)
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem...
CVE-2026-78328
9.1 Critical
-
sonicwall network security manager (nsm)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...
CVE-2026-78327
9.1 Critical
-
sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more
Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS...
CVE-2026-83549
In KEVPublic exploit
7.8 High
-
sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due...
CVE-2026-83548
In KEVPublic exploit
10.0 Critical
-
sonicwall netextender
The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender...
CVE-2026-66153
7.0 High
-
sonicwall netextender
A Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows...
CVE-2026-66152
8.8 High
-
sonicwall email security
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66150
7.8 High
-
sonicwall email security
Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email...
CVE-2026-66149
7.8 High
-
sonicwall gms
An insecure handling of serialized objects vulnerability was found in the one of the service of...
CVE-2026-18634
8.4 High
-
sonicwall gms
An insufficient certificate validation in a privileged communication workflow, was identified in...
CVE-2026-66154
8.3 High
-
sonicwall gms
An authenticated command injection vulnerability was identified in GMS Command-Line Interface ...
CVE-2026-66148
6.3 Medium
-
sonicwall gms
An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service...
CVE-2026-66147
9.4 Critical
-
sonicwall gms
Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044...
CVE-2026-66146
6.1 Medium
-
sonicwall gms
An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510...
CVE-2026-66145
9.1 Critical
-
sonicwall global vpn client
SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds...
CVE-2026-66151
5.5 Medium
-
sonicwall sonicos
A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could...
CVE-2026-0516
6.5 Medium
-
sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more
Post-authentication improper control of generation of code ('Code Injection') vulnerability has...
CVE-2026-15410
In KEVPublic exploit
EPSS 11.8%
7.2 High
-
sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance...
CVE-2026-15409
In KEVPublic exploit
10.0 Critical
-
sonicwall sonicos
A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote...
CVE-2026-0206
4.9 Medium
-
sonicwall sonicos
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with...
CVE-2026-0205
6.8 Medium
-
sonicwall sonicos
A vulnerability in the access control mechanism of SonicOS may allow certain management interface...
CVE-2026-0204
8.0 High
-
sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote...
CVE-2026-4116
7.2 High
-
sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote...
CVE-2026-4114
6.6 Medium
-
sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances...
CVE-2026-4113
7.2 High
-
sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall...
CVE-2026-4112
Public exploit
7.2 High
-
sonicwall email security
A vulnerability exists in the SonicWall Email Security appliance due to improper input...
CVE-2026-3470
3.8 Low
-
sonicwall email security
A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall...
CVE-2026-3469
2.7 Low
-
sonicwall email security
A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email...
CVE-2026-3468
4.8 Medium
-
sonicwall sonicos
A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling...
CVE-2026-3439
4.9 Medium
-
sonicwall sonicos
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to...
CVE-2026-0402
4.9 Medium
-
sonicwall sonicos
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker...
CVE-2026-0401
4.9 Medium
-
sonicwall sonicos
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a...
CVE-2026-0400
4.9 Medium
-
sonicwall sonicos
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS...
CVE-2026-0399
4.9 Medium
-
sonicwall sma1000, sma1000 appliance, sma6200 firmware +4 more +6 more
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall...
CVE-2025-40602
In KEVPublic exploit
6.6 Medium
- Show olderLoading…