Skip to contentSonicwall vulnerabilities
Products
Show 64 moreShow less
Newest
- sonicwall sonicosA Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote...CVE-2025-406017.5 High
- sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 moreA Path Traversal vulnerability has been identified in the Email Security appliance allows an...CVE-2025-406055.3 Medium
- sonicwall email security, email security appliance 5000 firmware, email security appliance 5050 firmware +3 more +5 moreDownload of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance...CVE-2025-406049.8 Critical
- sonicwall sma100, sma 210 firmware, sma 410 firmware +1 more +3 moreA potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances...CVE-2025-406034.5 Medium
- sonicwall sonicosUse of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows...CVE-2025-406009.8 Critical
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreA Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface,...CVE-2025-40598EPSS 46.2%6.1 Medium
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreA Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote,...CVE-2025-40597EPSS 22.7%7.5 High
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreA Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote,...CVE-2025-40596EPSS 45.3%7.3 High
- sonicwall sma 100 series, sma 210 firmware, sma 410 firmware +1 more +3 moreAn authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management...CVE-2025-405999.1 Critical
- sonicwall sma1000A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance...CVE-2025-405957.2 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can...CVE-2025-32821EPSS 23.5%7.2 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can...CVE-2025-328208.8 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to...CVE-2025-328198.8 High
- sonicwall sma1000, sma1000 firmware +1 moreA Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance...CVE-2025-21707.2 High
- sonicwall sonicosA Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a...CVE-2025-328187.5 High
- sonicwall connect tunnelA Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and...CVE-2025-328176.1 Medium
- sonicwall netextenderAn Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall...CVE-2025-230107.2 High
- sonicwall netextenderA local privilege escalation vulnerability in SonicWall NetExtender Windows (32 and 64 bit)...CVE-2025-230097.2 High
- sonicwall netextenderAn improper privilege management vulnerability in the SonicWall NetExtender Windows (32 and 64...CVE-2025-230087.2 High
- forcepoint email securityPersistent XSS in blocked messagesCVE-2024-91036.1 Medium
- sonicwall netextenderA vulnerability in the NetExtender Windows client log export function allows unauthorized access...CVE-2025-230075.5 Medium
- sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 morePre-authentication deserialization of untrusted data vulnerability has been identified in the...CVE-2025-23006In KEVEPSS 26.6%9.8 Critical
- sonicwall sonicosSSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling...CVE-2024-128029.1 Critical
- sonicwall sonicosA post-authentication absolute path traversal vulnerability in SonicOS management allows a remote...CVE-2024-128064.9 Medium
- sonicwall sonicosA post-authentication format string vulnerability in SonicOS management allows a remote attacker...CVE-2024-128057.2 High
- sonicwall sonicosA post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a...CVE-2024-128037.2 High
- sonicwall sonicosAn Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker...CVE-2024-407659.8 Critical
- sonicwall sonicosA vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low...CVE-2024-537067.8 High
- sonicwall sonicosA Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a...CVE-2024-537057.5 High
- sonicwall sonicosAn Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote...CVE-2024-53704In KEVPublic exploitEPSS 95.3%9.8 Critical
- sonicwall sonicosUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN...CVE-2024-407629.8 Critical
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions...CVE-2024-53703Public exploitEPSS 12.6%8.1 High
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreUse of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the...CVE-2024-537025.3 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA vulnerability in the SonicWall SMA100 SSLVPN
firmware 10.2.1.13-72sv and earlier versions...CVE-2024-453196.3 Medium
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers...CVE-2024-453188.1 High
- sonicwall sma100, sma100 firmware, sma 200 firmware +4 more +6 moreHeap-based buffer overflow vulnerability in the SonicWall SMA100 SSLVPN due to the use of strcpy....CVE-2024-407637.5 High
- sonicwall sma1000A Server-Side Request Forgery (SSRF) vulnerability in SMA1000 appliance firmware versions 12.4.3...CVE-2024-453177.5 High
- sonicwall connect tunnelThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall...CVE-2024-453167.8 High
- sonicwall connect tunnelThe Improper link resolution before file access ('Link Following') vulnerability in SonicWall...CVE-2024-453155.5 Medium
- forcepoint email securityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2024-21668.8 High
- sonicwall sonicosAn improper access control vulnerability has been identified in the SonicWall SonicOS management...CVE-2024-40766In KEVEPSS 18.4%9.8 Critical
- sonicwall sonicosHeap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated...CVE-2024-407647.5 High
- sonicwall netextenderVulnerability in SonicWall NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier...CVE-2024-290148.8 High
- ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 moreRADIUS Protocol under RFC2865 is vulnerable to forgery attacks.CVE-2024-3596Public exploitFix availableEPSS 14.9%9.0 Critical
- apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 moreApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.CVE-2024-38475In KEVPublic exploitFix availableEPSS 100.0%9.1 Critical
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- sonicwall sonicosHeap-based buffer overflow vulnerability in the SonicOS SSL-VPN allows an authenticated remote...CVE-2024-290136.5 Medium
- sonicwall sonicosStack-based buffer overflow vulnerability in the SonicOS HTTP server allows an authenticated...CVE-2024-290127.5 High
- sonicwall gms, global management system +1 moreUse of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability...CVE-2024-290117.5 High
- sonicwall gms, global management system +1 moreThe XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE)...CVE-2024-290107.1 High
- Show moreLoading…