Sonicwall Sma100 vulnerabilities

• sonicwall sma1000 Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the... CVE-2026-102258 Public exploit 6.1 MediumOctober 7, 2026
• sonicwall sma1000 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface... CVE-2026-102257 Public exploit 7.2 HighOctober 7, 2026
• sonicwall sma1000 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS... CVE-2026-102256 Public exploit 7.8 HighOctober 7, 2026
• sonicwall sma1000 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due... CVE-2026-102255 Public exploit 10.0 CriticalOctober 7, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS... CVE-2026-83549 In KEVPublic exploit 7.8 HighSeptember 1, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due... CVE-2026-83548 In KEVPublic exploit 10.0 CriticalSeptember 1, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more Post-authentication improper control of generation of code ('Code Injection') vulnerability has... CVE-2026-15410 In KEVPublic exploit EPSS 11.8% 7.2 HighJuly 14, 2026
• sonicwall sma1000, sma1000 appliances, sma6210 firmware +2 more +4 more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... CVE-2026-15409 In KEVPublic exploit 10.0 CriticalJuly 14, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote... CVE-2026-4116 7.2 HighApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote... CVE-2026-4114 6.6 MediumApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances... CVE-2026-4113 7.2 HighApril 9, 2026
• sonicwall sma1000, sma6200 firmware, sma6210 firmware +3 more +5 more Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall... CVE-2026-4112 Public exploit 7.2 HighApril 9, 2026
• sonicwall sma1000, sma1000 appliance, sma6200 firmware +4 more +6 more A local privilege escalation vulnerability due to insufficient authorization in the SonicWall... CVE-2025-40602 In KEVPublic exploit 6.6 MediumDecember 18, 2025
• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances... CVE-2025-40603 4.5 MediumOctober 31, 2025
• sonicwall sma1000 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... CVE-2025-40595 7.2 HighMay 14, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can... CVE-2025-32821 EPSS 23.5% 7.2 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can... CVE-2025-32820 8.8 HighMay 7, 2025
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to... CVE-2025-32819 8.8 HighMay 7, 2025
• sonicwall sma1000, sma1000 firmware +1 more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance... CVE-2025-2170 7.2 HighApril 30, 2025
• sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 more Pre-authentication deserialization of untrusted data vulnerability has been identified in the... CVE-2025-23006 In KEV EPSS 26.6% 9.8 CriticalJanuary 23, 2025
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-53703 Public exploit EPSS 12.6% 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Use of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the... CVE-2024-53702 5.3 MediumDecember 5, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions... CVE-2024-45319 6.3 MediumDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers... CVE-2024-45318 8.1 HighDecember 5, 2024
• sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 more Heap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy.... CVE-2024-40763 7.5 HighDecember 5, 2024
• sonicwall sma1000 A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3... CVE-2024-45317 7.5 HighOctober 11, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper access control vulnerability has been identified in the SMA100 SSL-VPN virtual office... CVE-2024-22395 6.3 MediumFebruary 23, 2024
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated... CVE-2023-5970 8.8 HighDecember 5, 2023
• sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a... CVE-2023-44221 In KEV EPSS 76.2% 7.2 HighDecember 5, 2023
• sonicwall sma1000 firmware, sma1000 +1 more Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows... CVE-2023-0126 EPSS 72.7% 7.5 HighJanuary 19, 2023
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote... CVE-2022-2915 8.8 HighAugust 26, 2022
• sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 more Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management... CVE-2022-1703 EPSS 13.0% 8.8 HighJune 3, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts... CVE-2022-22282 9.8 CriticalMay 13, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user... CVE-2022-1702 6.1 MediumMay 13, 2022
• sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 more SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and... CVE-2022-1701 7.5 HighMay 13, 2022
• sonicwall sma 210 firmware, sma 410 firmware, sma 500v firmware +3 more +5 more ** UNSUPPORTED WHEN ASSIGNED ** A post-authentication arbitrary file read vulnerability impacting... CVE-2022-22279 4.9 MediumApril 13, 2022
• sonicwall sra, sma 100, sma 200 firmware +9 more +11 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command... CVE-2022-22273 9.8 CriticalMarch 17, 2022
• linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update CVE-2022-0847 In KEVPublic exploitFix available EPSS 92.8% 7.8 HighMarch 7, 2022
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted... CVE-2021-20050 7.5 HighDecember 23, 2021
• sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 more A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker... CVE-2021-20049 7.5 HighDecember 23, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a... CVE-2021-20045 EPSS 25.2% 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote... CVE-2021-20044 EPSS 40.1% 8.8 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a... CVE-2021-20043 EPSS 23.3% 8.8 HighDecember 8, 2021
• sonicwall sma 200 firmware, sma 210 firmware, sma 400 firmware +3 more +5 more An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary... CVE-2021-20042 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP... CVE-2021-20041 EPSS 21.2% 7.5 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more A relative path traversal vulnerability in the SMA100 upload funtion allows a remote... CVE-2021-20040 EPSS 25.1% 7.5 HighDecember 8, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert... CVE-2021-20039 Public exploit EPSS 78.7% 8.8 HighDecember 8, 2021
• sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 more A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module... CVE-2021-20038 In KEVPublic exploit EPSS 99.9% 9.8 CriticalDecember 8, 2021
• sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 management interface allows a remote... CVE-2021-20035 In KEV 6.5 MediumSeptember 27, 2021
• sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 more An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to... CVE-2021-20034 Public exploit EPSS 81.8% 9.1 CriticalSeptember 27, 2021
• Show olderLoading…