{"schema_version":1,"title":"SonicWall vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 32 vulnerabilities in SonicWall: 0 in the last 7 days and 11 in the last 90 days, 24 of them critical and 19 exploited in the wild. The most recent, CVE-2026-81939, was published on 4 September 2026. 10 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/sonicwall","json_url":"https://junglewise.ai/threats/vendors/sonicwall.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/sonicwall","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":4,"all_time":32,"critical":24,"exploited":19,"last_7_days":0,"last_30_days":5,"last_90_days":11,"last_365_days":17},"latest":[{"cve":"CVE-2026-81939","cvss":9.1,"epss":0.0068,"slug":"cve-2026-81939-sonicwall-network-security-manager-on-prem-zip-slip-in-archive","title":"SonicWall Network Security Manager On-Prem zip slip in archive processing","severity":"critical","exploited":false,"published_at":"2026-09-04T19:17:29.237+00:00","url":"https://junglewise.ai/threats/cve-2026-81939-sonicwall-network-security-manager-on-prem-zip-slip-in-archive"},{"cve":"CVE-2026-78328","cvss":9.1,"epss":0.0046,"slug":"cve-2026-78328-sonicwall-network-security-manager-privilege-escalation-in","title":"SonicWall Network Security Manager privilege escalation in management interface","severity":"critical","exploited":false,"published_at":"2026-09-04T19:17:27.463+00:00","url":"https://junglewise.ai/threats/cve-2026-78328-sonicwall-network-security-manager-privilege-escalation-in"},{"cve":"CVE-2026-78327","cvss":9.1,"epss":0.0155,"slug":"cve-2026-78327-sonicwall-network-security-manager-os-command-injection","title":"SonicWall Network Security Manager OS command injection","severity":"critical","exploited":false,"published_at":"2026-09-04T19:17:27.347+00:00","url":"https://junglewise.ai/threats/cve-2026-78327-sonicwall-network-security-manager-os-command-injection"},{"cve":"CVE-2026-83549","cvss":7.8,"epss":0.1076,"slug":"cve-2026-83549-sonicwall-sma1000-os-command-injection","title":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.29+00:00","url":"https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection"},{"cve":"CVE-2026-83548","cvss":10,"epss":0.0876,"slug":"cve-2026-83548-sonicwall-sma1000-server-side-request-forgery","title":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.17+00:00","url":"https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery"},{"cve":"CVE-2026-66153","cvss":7,"epss":0.0024,"slug":"cve-2026-66153-sonicwall-netextender-linux-client-insecure-temporary-file","title":"SonicWall NetExtender Linux client insecure temporary file handling","severity":"high","exploited":false,"published_at":"2026-08-25T20:17:01.27+00:00","url":"https://junglewise.ai/threats/cve-2026-66153-sonicwall-netextender-linux-client-insecure-temporary-file"},{"cve":"CVE-2026-66152","cvss":8.8,"epss":0.005,"slug":"cve-2026-66152-sonicwall-netextender-linux-path-traversal-in-file-extractor","title":"SonicWall NetExtender Linux path traversal in file extractor","severity":"high","exploited":false,"published_at":"2026-08-25T20:17:01.147+00:00","url":"https://junglewise.ai/threats/cve-2026-66152-sonicwall-netextender-linux-path-traversal-in-file-extractor"},{"cve":"CVE-2026-66146","cvss":6.1,"epss":0.003,"slug":"cve-2026-66146-sonicwall-gms-cross-site-scripting","title":"SonicWall GMS cross-site scripting","severity":"medium","exploited":false,"published_at":"2026-08-11T20:18:37.837+00:00","url":"https://junglewise.ai/threats/cve-2026-66146-sonicwall-gms-cross-site-scripting"},{"cve":"CVE-2026-66145","cvss":9.1,"epss":0.0066,"slug":"cve-2026-66145-sonicwall-gms-remote-code-execution-via-zipslip","title":"SonicWall GMS remote code execution via zipslip","severity":"critical","exploited":false,"published_at":"2026-08-11T20:18:37.717+00:00","url":"https://junglewise.ai/threats/cve-2026-66145-sonicwall-gms-remote-code-execution-via-zipslip"},{"cve":"CVE-2026-15410","slug":"cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console","title":"SonicWall SMA1000 code injection in Appliance Management Console","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.903+00:00","url":"https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console"},{"cve":"CVE-2026-15409","slug":"cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface","title":"SonicWall SMA1000 SSRF in Work Place interface","severity":"critical","exploited":true,"published_at":"2026-07-14T20:16:56.783+00:00","url":"https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface"},{"cve":"CVE-2026-4116","cvss":7.2,"slug":"cve-2026-4116-sonicwall-sma1000-series-totp-authentication-bypass-via-unicode","title":"SonicWall SMA1000 series TOTP authentication bypass via Unicode encoding","severity":"high","exploited":false,"published_at":"2026-04-09T15:16:14.01+00:00","url":"https://junglewise.ai/threats/cve-2026-4116-sonicwall-sma1000-series-totp-authentication-bypass-via-unicode"},{"cve":"CVE-2026-4113","cvss":7.2,"slug":"cve-2026-4113-sonicwall-sma-1000-series-credential-enumeration-via-response","title":"SonicWall SMA 1000 Series credential enumeration via response discrepancy","severity":"high","exploited":false,"published_at":"2026-04-09T15:16:13.683+00:00","url":"https://junglewise.ai/threats/cve-2026-4113-sonicwall-sma-1000-series-credential-enumeration-via-response"},{"cve":"CVE-2026-3470","cvss":3.8,"epss":0.0032,"slug":"cve-2026-3470-sonicwall-email-security-database-corruption-via-improper-input","title":"SonicWall Email Security database corruption via improper input sanitization","severity":"low","exploited":false,"published_at":"2026-03-31T21:16:33.363+00:00","url":"https://junglewise.ai/threats/cve-2026-3470-sonicwall-email-security-database-corruption-via-improper-input"},{"cve":"CVE-2026-3469","cvss":2.7,"epss":0.0039,"slug":"cve-2026-3469-sonicwall-email-security-denial-of-service-via-improper-input","title":"SonicWall Email Security denial of service via improper input validation","severity":"low","exploited":false,"published_at":"2026-03-31T21:16:33.163+00:00","url":"https://junglewise.ai/threats/cve-2026-3469-sonicwall-email-security-denial-of-service-via-improper-input"},{"cve":"CVE-2026-3468","cvss":4.8,"epss":0.0023,"slug":"cve-2026-3468-sonicwall-email-security-stored-xss","title":"SonicWall Email Security stored XSS","severity":"medium","exploited":false,"published_at":"2026-03-31T21:16:32.95+00:00","url":"https://junglewise.ai/threats/cve-2026-3468-sonicwall-email-security-stored-xss"},{"cve":"CVE-2025-40602","cvss":6.6,"epss":0.0015,"slug":"cve-2025-40602-sonicwall-sma1000-privilege-escalation-in-amc","title":"SonicWall SMA1000 privilege escalation in AMC","severity":"critical","exploited":true,"published_at":"2025-12-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-40602-sonicwall-sma1000-privilege-escalation-in-amc"},{"cve":"CVE-2023-44221","cvss":7.2,"slug":"cve-2023-44221-sonicwall-sma100-appliances-os-command-injection-vulnerability","title":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-05-01T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-44221-sonicwall-sma100-appliances-os-command-injection-vulnerability"},{"cve":"CVE-2021-20035","cvss":6.5,"slug":"cve-2021-20035-sonicwall-sma100-appliances-os-command-injection-vulnerability","title":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2025-04-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20035-sonicwall-sma100-appliances-os-command-injection-vulnerability"},{"cve":"CVE-2024-53704","cvss":9.8,"slug":"cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability","title":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability"},{"cve":"CVE-2025-23006","cvss":9.8,"slug":"cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability","title":"SonicWall SMA1000 Appliances Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability"},{"cve":"CVE-2024-40766","cvss":9.8,"slug":"cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability","title":"SonicWall SonicOS Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability"},{"cve":"CVE-2024-3596","cvss":9,"slug":"cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius","title":"RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)","severity":"critical","exploited":false,"published_at":"2024-07-09T12:15:20.7+00:00","url":"https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius"},{"cve":"CVE-2021-20028","cvss":9.8,"slug":"cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability","title":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability"},{"cve":"CVE-2019-7483","cvss":7.5,"slug":"cve-2019-7483-sonicwall-sma100-directory-traversal-vulnerability","title":"SonicWall SMA100 Directory Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-7483-sonicwall-sma100-directory-traversal-vulnerability"}],"vendor":{"hub":true,"name":"SonicWall","slug":"sonicwall","description":"Network security appliance manufacturer producing firewalls and intrusion detection systems.","url":"https://junglewise.ai/threats/vendors/sonicwall"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":2,"exploited":2,"vulnerabilities":2},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":2},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":5,"exploited":2,"vulnerabilities":5},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-83548","cvss":10,"epss":0.0876,"slug":"cve-2026-83548-sonicwall-sma1000-server-side-request-forgery","title":"A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A r","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.17+00:00","url":"https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery"},{"cve":"CVE-2024-53704","cvss":9.8,"slug":"cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability","title":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2025-02-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability"},{"cve":"CVE-2025-23006","cvss":9.8,"slug":"cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability","title":"SonicWall SMA1000 Appliances Deserialization Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-24T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability"},{"cve":"CVE-2024-40766","cvss":9.8,"slug":"cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability","title":"SonicWall SonicOS Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2024-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability"},{"cve":"CVE-2021-20028","cvss":9.8,"slug":"cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability","title":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability"},{"cve":"CVE-2020-5135","cvss":9.8,"slug":"cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability","title":"SonicWall SonicOS Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability"},{"cve":"CVE-2021-20038","cvss":9.8,"slug":"cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow","title":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-01-28T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow"},{"cve":"CVE-2021-20016","cvss":9.8,"slug":"cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability","title":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability"},{"cve":"CVE-2021-20021","cvss":9.8,"slug":"cve-2021-20021-sonicwall-email-security-improper-privilege-management","title":"SonicWall Email Security Improper Privilege Management Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-20021-sonicwall-email-security-improper-privilege-management"},{"cve":"CVE-2026-83549","cvss":7.8,"epss":0.1076,"slug":"cve-2026-83549-sonicwall-sma1000-os-command-injection","title":"Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identi","severity":"critical","exploited":true,"published_at":"2026-09-01T22:17:13.29+00:00","url":"https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"SonicWall Email Security","slug":"email-security","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/email-security"},{"name":"SonicWall SMA1000 Appliances","slug":"sma1000-appliances","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/sma1000-appliances"},{"name":"SonicWall SMA100","slug":"sma100","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/sma100"},{"name":"SonicWall SonicOS","slug":"sonicos","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/sonicos"},{"name":"SonicWall Esa5000","slug":"esa5000","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/esa5000"},{"name":"SonicWall Esa5050","slug":"esa5050","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/esa5050"},{"name":"SonicWall Esa7000","slug":"esa7000","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/esa7000"},{"name":"SonicWall Esa7050","slug":"esa7050","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/esa7050"},{"name":"SonicWall Esa9000","slug":"esa9000","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/esa9000"},{"name":"SonicWall SMA 1000 Series Firmware","slug":"sma-1000-series-firmware","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sma-1000-series-firmware"}]}