Vendor
SonicWall vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 53 vulnerabilities in SonicWall: 7 in the last 7 days and 16 in the last 90 days, 27 of them critical and 20 exploited in the wild. The most recent, CVE-2026-82308, was published on 6 November 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0, 1 exploited in the wild against 0. 74 technologies have a page of their own.
- Last 7 days
- 7
- Last 90 days
- 16
- Critical, all time
- 27
- Exploited in the wild
- 20
About SonicWall
Network security company that develops firewalls, intrusion prevention systems, and secure email gateways.
SonicWall technologies
- SonicWall SonicOS20
- SonicWall Nsa 27009
- SonicWall Nsa 28009
- SonicWall Nsa 37009
- SonicWall Nsa 38009
- SonicWall Nsa 47009
- SonicWall Nsa 48009
- SonicWall Nsa 57009
- SonicWall Nsa 58009
- SonicWall Nsa 67009
- SonicWall Nssp 107009
- SonicWall Nssp 117009
- SonicWall Nssp 137009
- SonicWall Nssp 157009
- SonicWall Tz2709
- SonicWall Tz270w9
- SonicWall Tz2809
- SonicWall Tz3709
- SonicWall Tz370w9
- SonicWall Tz3809
- SonicWall Tz4709
- SonicWall Tz470w9
- SonicWall Tz4809
- SonicWall Tz5709
- SonicWall Tz570p9
- SonicWall Tz570w9
- SonicWall Tz5809
- SonicWall Tz6709
- SonicWall Tz6809
- SonicWall Tz809
- SonicWall Nsv 2708
- SonicWall Nsv 4708
- SonicWall Nsv 8708
- SonicWall Email Security6
- SonicWall SMA1000 Appliances5
- SonicWall GMS4
- SonicWall SMA1004
- SonicWall Esa50003
- SonicWall Esa50503
- SonicWall Esa70003
- SonicWall Esa70503
- SonicWall Esa90003
- SonicWall Nsa 26503
- SonicWall Nsa 36003
- SonicWall Nsa 36503
- SonicWall Nsa 46003
- SonicWall Nsa 46503
- SonicWall Nsa 56003
- SonicWall Nsa 56503
- SonicWall Nsa 66003
- SonicWall Nsa 66503
- SonicWall Sm 92003
- SonicWall Sm 92503
- SonicWall Sm 94003
- SonicWall Sm 94503
- SonicWall Sm 96003
- SonicWall Sm 96503
- SonicWall SMA 1000 Series Firmware3
- SonicWall Soho 2503
- SonicWall Soho 250w3
- SonicWall Sohow3
- SonicWall Tz 3003
- SonicWall Tz 300p3
- SonicWall Tz 300w3
- SonicWall Tz 3503
- SonicWall Tz 350w3
- SonicWall Tz 4003
- SonicWall Tz 400w3
- SonicWall Tz 5003
- SonicWall Tz 500w3
- SonicWall Tz 6003
- SonicWall Tz 600p3
- SonicWall Tz280w3
- SonicWall Tz380w3
Latest SonicWall vulnerabilities
- CVE-2026-82308: SonicWall SonicOS heap-based buffer overflow in SSL-VPNinfo
- CVE-2026-77709: SonicWall SonicOS heap buffer overflow in TACACS+ clientinfo
- CVE-2026-77708: SonicWall SonicOS stack-based buffer overflow in TACACS+ clientinfo
- CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypasscriticalexploited in the wild
- CVE-2026-19703: SonicWall SonicOS weak password hashinginfo
- CVE-2026-107155: SonicOS permissive cross-domain policy in management interfacehighCVSS 8.8
- CVE-2026-107154: SonicWall SonicOS session validation bypass in management interfacehighCVSS 8.8
- CVE-2026-109594: SonicWall GMS SQL injectionmediumCVSS 6.8
- CVE-2026-109593: SonicWall GMS arbitrary file readcriticalCVSS 9.1
- CVE-2026-81939: SonicWall Network Security Manager On-Prem zip slip in archive processingcriticalCVSS 9.1EPSS 0.7%
- CVE-2026-78328: SonicWall Network Security Manager privilege escalation in management interfacecriticalCVSS 9.1EPSS 0.5%
- CVE-2026-78327: SonicWall Network Security Manager OS command injectioncriticalCVSS 9.1EPSS 1.6%
- CVE-2026-83549: SonicWall SMA1000 OS command injectioncriticalexploited in the wildCVSS 7.8EPSS 10.8%
- CVE-2026-83548: SonicWall SMA1000 server-side request forgerycriticalexploited in the wildCVSS 10EPSS 8.8%
- CVE-2026-66153: SonicWall NetExtender Linux client insecure temporary file handlinghighCVSS 7EPSS 0.2%
- CVE-2026-66152: SonicWall NetExtender Linux path traversal in file extractorhighCVSS 8.8EPSS 0.5%
- CVE-2026-66146: SonicWall GMS cross-site scriptingmediumCVSS 6.1EPSS 0.3%
- CVE-2026-66145: SonicWall GMS remote code execution via zipslipcriticalCVSS 9.1EPSS 0.7%
- CVE-2026-15410: SonicWall SMA1000 code injection in Appliance Management Consolecriticalexploited in the wild
- CVE-2026-15409: SonicWall SMA1000 SSRF in Work Place interfacecriticalexploited in the wild
- CVE-2026-0206: A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.mediumCVSS 4.9EPSS 0.5%
- CVE-2026-0205: A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted…mediumCVSS 6.8EPSS 0.4%
- CVE-2026-0204: A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be…highCVSS 8EPSS 0.4%
- CVE-2026-4116: SonicWall SMA1000 series TOTP authentication bypass via Unicode encodinghighCVSS 7.2
- CVE-2026-4113: SonicWall SMA 1000 Series credential enumeration via response discrepancyhighCVSS 7.2
Most severe SonicWall vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-83548: SonicWall SMA1000 server-side request forgerycriticalexploited in the wildCVSS 10EPSS 8.8%
- CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2026-83549: SonicWall SMA1000 OS command injectioncriticalexploited in the wildCVSS 7.8EPSS 10.8%
Vulnerabilities per week
9 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0, 1 exploited in the wild against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 2 | 0 | |
| 31 Aug 2026 | 5 | 5 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 9 | 2 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many SonicWall vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/sonicwall)<a href="https://junglewise.ai/threats/vendors/sonicwall"><img src="https://junglewise.ai/threats/vendors/sonicwall/badge.svg" alt="SonicWall vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/sonicwall.json, and this page as text at https://junglewise.ai/threats/vendors/sonicwall.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "SonicWall vulnerabilities", https://junglewise.ai/threats/vendors/sonicwall, 11 November 2026.