# SonicWall vulnerabilities Source: https://junglewise.ai/threats/vendors/sonicwall Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/sonicwall.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 53 vulnerabilities in SonicWall: 7 in the last 7 days and 16 in the last 90 days, 27 of them critical and 20 exploited in the wild. The most recent, CVE-2026-82308, was published on 6 November 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0, 1 exploited in the wild against 0. 74 technologies have a page of their own. ## Counts - Last 7 days: 7 - Last 30 days: 9 - Last 90 days: 16 - All time: 53 (27 critical, 20 exploited in the wild) ## About SonicWall Network security company that develops firewalls, intrusion prevention systems, and secure email gateways. ## Latest SonicWall vulnerabilities - [CVE-2026-82308: SonicWall SonicOS heap-based buffer overflow in SSL-VPN](https://junglewise.ai/threats/cve-2026-82308-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has) (info, published 6 Nov 2026) - [CVE-2026-77709: SonicWall SonicOS heap buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77709-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has) (info, published 6 Nov 2026) - [CVE-2026-77708: SonicWall SonicOS stack-based buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77708-a-pre-authentication-stack-based-buffer-overflow-vulnerability) (info, published 6 Nov 2026) - [CVE-2026-19868: SonicWall SonicOS SSLVPN SAML authentication bypass](https://junglewise.ai/threats/cve-2026-19868-an-authentication-enforcement-vulnerability-in-sonicos-sslvpn) (critical, exploited in the wild, published 6 Nov 2026) - [CVE-2026-19703: SonicWall SonicOS weak password hashing](https://junglewise.ai/threats/cve-2026-19703-a-weak-password-hashing-vulnerability-has-been-identified-on) (info, published 6 Nov 2026) - [CVE-2026-107155: SonicOS permissive cross-domain policy in management interface](https://junglewise.ai/threats/cve-2026-107155-a-permissive-cross-domain-policy-vulnerability-has-been) (high, CVSS 8.8, published 6 Nov 2026) - [CVE-2026-107154: SonicWall SonicOS session validation bypass in management interface](https://junglewise.ai/threats/cve-2026-107154-a-session-validation-vulnerability-has-been-identified-in-the) (high, CVSS 8.8, published 6 Nov 2026) - [CVE-2026-109594: SonicWall GMS SQL injection](https://junglewise.ai/threats/cve-2026-109594-post-authentication-improper-neutralization-of-special-elements) (medium, CVSS 6.8, published 3 Nov 2026) - [CVE-2026-109593: SonicWall GMS arbitrary file read](https://junglewise.ai/threats/cve-2026-109593-an-unauthenticated-attacker-with-network-access-to-the-sonicwall) (critical, CVSS 9.1, published 3 Nov 2026) - [CVE-2026-81939: SonicWall Network Security Manager On-Prem zip slip in archive processing](https://junglewise.ai/threats/cve-2026-81939-sonicwall-network-security-manager-on-prem-zip-slip-in-archive) (critical, CVSS 9.1, published 4 Sep 2026) - [CVE-2026-78328: SonicWall Network Security Manager privilege escalation in management interface](https://junglewise.ai/threats/cve-2026-78328-sonicwall-network-security-manager-privilege-escalation-in) (critical, CVSS 9.1, published 4 Sep 2026) - [CVE-2026-78327: SonicWall Network Security Manager OS command injection](https://junglewise.ai/threats/cve-2026-78327-sonicwall-network-security-manager-os-command-injection) (critical, CVSS 9.1, published 4 Sep 2026) - [CVE-2026-83549: SonicWall SMA1000 OS command injection](https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection) (critical, exploited in the wild, CVSS 7.8, published 1 Sep 2026) - [CVE-2026-83548: SonicWall SMA1000 server-side request forgery](https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery) (critical, exploited in the wild, CVSS 10, published 1 Sep 2026) - [CVE-2026-66153: SonicWall NetExtender Linux client insecure temporary file handling](https://junglewise.ai/threats/cve-2026-66153-sonicwall-netextender-linux-client-insecure-temporary-file) (high, CVSS 7, published 25 Aug 2026) - [CVE-2026-66152: SonicWall NetExtender Linux path traversal in file extractor](https://junglewise.ai/threats/cve-2026-66152-sonicwall-netextender-linux-path-traversal-in-file-extractor) (high, CVSS 8.8, published 25 Aug 2026) - [CVE-2026-66146: SonicWall GMS cross-site scripting](https://junglewise.ai/threats/cve-2026-66146-sonicwall-gms-cross-site-scripting) (medium, CVSS 6.1, published 11 Aug 2026) - [CVE-2026-66145: SonicWall GMS remote code execution via zipslip](https://junglewise.ai/threats/cve-2026-66145-sonicwall-gms-remote-code-execution-via-zipslip) (critical, CVSS 9.1, published 11 Aug 2026) - [CVE-2026-15410: SonicWall SMA1000 code injection in Appliance Management Console](https://junglewise.ai/threats/cve-2026-15410-sonicwall-sma1000-code-injection-in-appliance-management-console) (critical, exploited in the wild, published 14 Jul 2026) - [CVE-2026-15409: SonicWall SMA1000 SSRF in Work Place interface](https://junglewise.ai/threats/cve-2026-15409-sonicwall-sma1000-ssrf-in-work-place-interface) (critical, exploited in the wild, published 14 Jul 2026) - [CVE-2026-0206: A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.](https://junglewise.ai/threats/cve-2026-0206-a-post-authentication-stack-based-buffer-overflow-vulnerabilities) (medium, CVSS 4.9, published 29 Apr 2026) - [CVE-2026-0205: A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted…](https://junglewise.ai/threats/cve-2026-0205-a-post-authentication-path-traversal-vulnerability-in-sonicos) (medium, CVSS 6.8, published 29 Apr 2026) - [CVE-2026-0204: A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be…](https://junglewise.ai/threats/cve-2026-0204-a-vulnerability-in-the-access-control-mechanism-of-sonicos-may) (high, CVSS 8, published 29 Apr 2026) - [CVE-2026-4116: SonicWall SMA1000 series TOTP authentication bypass via Unicode encoding](https://junglewise.ai/threats/cve-2026-4116-sonicwall-sma1000-series-totp-authentication-bypass-via-unicode) (high, CVSS 7.2, published 9 Apr 2026) - [CVE-2026-4113: SonicWall SMA 1000 Series credential enumeration via response discrepancy](https://junglewise.ai/threats/cve-2026-4113-sonicwall-sma-1000-series-credential-enumeration-via-response) (high, CVSS 7.2, published 9 Apr 2026) ## Most severe SonicWall vulnerabilities - [CVE-2026-83548: SonicWall SMA1000 server-side request forgery](https://junglewise.ai/threats/cve-2026-83548-sonicwall-sma1000-server-side-request-forgery) (critical, exploited in the wild, CVSS 10, published 1 Sep 2026) - [CVE-2024-53704: SonicWall SonicOS SSLVPN Improper Authentication Vulnerability](https://junglewise.ai/threats/cve-2024-53704-sonicwall-sonicos-sslvpn-improper-authentication-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 18 Feb 2025) - [CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability](https://junglewise.ai/threats/cve-2025-23006-sonicwall-sma1000-appliances-deserialization-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 24 Jan 2025) - [CVE-2024-40766: SonicWall SonicOS Improper Access Control Vulnerability](https://junglewise.ai/threats/cve-2024-40766-sonicwall-sonicos-improper-access-control-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 9 Sep 2024) - [CVE-2021-20028: SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-20028-sonicwall-secure-remote-access-sra-sql-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 28 Mar 2022) - [CVE-2020-5135: SonicWall SonicOS Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2020-5135-sonicwall-sonicos-buffer-overflow-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 15 Mar 2022) - [CVE-2021-20038: SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2021-20038-sonicwall-sma-100-appliances-stack-based-buffer-overflow) (critical, exploited in the wild, CVSS 9.8, published 28 Jan 2022) - [CVE-2021-20016: SonicWall SSLVPN SMA100 SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2021-20016-sonicwall-sslvpn-sma100-sql-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2021-20021: SonicWall Email Security Improper Privilege Management Vulnerability](https://junglewise.ai/threats/cve-2021-20021-sonicwall-email-security-improper-privilege-management) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2026-83549: SonicWall SMA1000 OS command injection](https://junglewise.ai/threats/cve-2026-83549-sonicwall-sma1000-os-command-injection) (critical, exploited in the wild, CVSS 7.8, published 1 Sep 2026) ## Vulnerabilities per week 9 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 2 | 0 | 0 | | 31 Aug 2026 | 5 | 5 | 2 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 9 | 2 | 1 | | 9 Nov 2026 | 0 | 0 | 0 | ## SonicWall technologies - [SonicWall SonicOS](https://junglewise.ai/threats/technologies/sonicos): 20 vulnerabilities - [SonicWall Nsa 2700](https://junglewise.ai/threats/technologies/nsa-2700): 9 vulnerabilities - [SonicWall Nsa 2800](https://junglewise.ai/threats/technologies/nsa-2800): 9 vulnerabilities - [SonicWall Nsa 3700](https://junglewise.ai/threats/technologies/nsa-3700): 9 vulnerabilities - [SonicWall Nsa 3800](https://junglewise.ai/threats/technologies/nsa-3800): 9 vulnerabilities - [SonicWall Nsa 4700](https://junglewise.ai/threats/technologies/nsa-4700): 9 vulnerabilities - [SonicWall Nsa 4800](https://junglewise.ai/threats/technologies/nsa-4800): 9 vulnerabilities - [SonicWall Nsa 5700](https://junglewise.ai/threats/technologies/nsa-5700): 9 vulnerabilities - [SonicWall Nsa 5800](https://junglewise.ai/threats/technologies/nsa-5800): 9 vulnerabilities - [SonicWall Nsa 6700](https://junglewise.ai/threats/technologies/nsa-6700): 9 vulnerabilities - [SonicWall Nssp 10700](https://junglewise.ai/threats/technologies/nssp-10700): 9 vulnerabilities - [SonicWall Nssp 11700](https://junglewise.ai/threats/technologies/nssp-11700): 9 vulnerabilities - [SonicWall Nssp 13700](https://junglewise.ai/threats/technologies/nssp-13700): 9 vulnerabilities - [SonicWall Nssp 15700](https://junglewise.ai/threats/technologies/nssp-15700): 9 vulnerabilities - [SonicWall Tz270](https://junglewise.ai/threats/technologies/tz270): 9 vulnerabilities - [SonicWall Tz270w](https://junglewise.ai/threats/technologies/tz270w): 9 vulnerabilities - [SonicWall Tz280](https://junglewise.ai/threats/technologies/tz280): 9 vulnerabilities - [SonicWall Tz370](https://junglewise.ai/threats/technologies/tz370): 9 vulnerabilities - [SonicWall Tz370w](https://junglewise.ai/threats/technologies/tz370w): 9 vulnerabilities - [SonicWall Tz380](https://junglewise.ai/threats/technologies/tz380): 9 vulnerabilities - [SonicWall Tz470](https://junglewise.ai/threats/technologies/tz470): 9 vulnerabilities - [SonicWall Tz470w](https://junglewise.ai/threats/technologies/tz470w): 9 vulnerabilities - [SonicWall Tz480](https://junglewise.ai/threats/technologies/tz480): 9 vulnerabilities - [SonicWall Tz570](https://junglewise.ai/threats/technologies/tz570): 9 vulnerabilities - [SonicWall Tz570p](https://junglewise.ai/threats/technologies/tz570p): 9 vulnerabilities - [SonicWall Tz570w](https://junglewise.ai/threats/technologies/tz570w): 9 vulnerabilities - [SonicWall Tz580](https://junglewise.ai/threats/technologies/tz580): 9 vulnerabilities - [SonicWall Tz670](https://junglewise.ai/threats/technologies/tz670): 9 vulnerabilities - [SonicWall Tz680](https://junglewise.ai/threats/technologies/tz680): 9 vulnerabilities - [SonicWall Tz80](https://junglewise.ai/threats/technologies/tz80): 9 vulnerabilities - [SonicWall Nsv 270](https://junglewise.ai/threats/technologies/nsv-270): 8 vulnerabilities - [SonicWall Nsv 470](https://junglewise.ai/threats/technologies/nsv-470): 8 vulnerabilities - [SonicWall Nsv 870](https://junglewise.ai/threats/technologies/nsv-870): 8 vulnerabilities - [SonicWall Email Security](https://junglewise.ai/threats/technologies/email-security): 6 vulnerabilities - [SonicWall SMA1000 Appliances](https://junglewise.ai/threats/technologies/sma1000-appliances): 5 vulnerabilities - [SonicWall GMS](https://junglewise.ai/threats/technologies/gms): 4 vulnerabilities - [SonicWall SMA100](https://junglewise.ai/threats/technologies/sma100): 4 vulnerabilities - [SonicWall Esa5000](https://junglewise.ai/threats/technologies/esa5000): 3 vulnerabilities - [SonicWall Esa5050](https://junglewise.ai/threats/technologies/esa5050): 3 vulnerabilities - [SonicWall Esa7000](https://junglewise.ai/threats/technologies/esa7000): 3 vulnerabilities - [SonicWall Esa7050](https://junglewise.ai/threats/technologies/esa7050): 3 vulnerabilities - [SonicWall Esa9000](https://junglewise.ai/threats/technologies/esa9000): 3 vulnerabilities - [SonicWall Nsa 2650](https://junglewise.ai/threats/technologies/nsa-2650): 3 vulnerabilities - [SonicWall Nsa 3600](https://junglewise.ai/threats/technologies/nsa-3600): 3 vulnerabilities - [SonicWall Nsa 3650](https://junglewise.ai/threats/technologies/nsa-3650): 3 vulnerabilities - [SonicWall Nsa 4600](https://junglewise.ai/threats/technologies/nsa-4600): 3 vulnerabilities - [SonicWall Nsa 4650](https://junglewise.ai/threats/technologies/nsa-4650): 3 vulnerabilities - [SonicWall Nsa 5600](https://junglewise.ai/threats/technologies/nsa-5600): 3 vulnerabilities - [SonicWall Nsa 5650](https://junglewise.ai/threats/technologies/nsa-5650): 3 vulnerabilities - [SonicWall Nsa 6600](https://junglewise.ai/threats/technologies/nsa-6600): 3 vulnerabilities - [SonicWall Nsa 6650](https://junglewise.ai/threats/technologies/nsa-6650): 3 vulnerabilities - [SonicWall Sm 9200](https://junglewise.ai/threats/technologies/sm-9200): 3 vulnerabilities - [SonicWall Sm 9250](https://junglewise.ai/threats/technologies/sm-9250): 3 vulnerabilities - [SonicWall Sm 9400](https://junglewise.ai/threats/technologies/sm-9400): 3 vulnerabilities - [SonicWall Sm 9450](https://junglewise.ai/threats/technologies/sm-9450): 3 vulnerabilities - [SonicWall Sm 9600](https://junglewise.ai/threats/technologies/sm-9600): 3 vulnerabilities - [SonicWall Sm 9650](https://junglewise.ai/threats/technologies/sm-9650): 3 vulnerabilities - [SonicWall SMA 1000 Series Firmware](https://junglewise.ai/threats/technologies/sma-1000-series-firmware): 3 vulnerabilities - [SonicWall Soho 250](https://junglewise.ai/threats/technologies/soho-250): 3 vulnerabilities - [SonicWall Soho 250w](https://junglewise.ai/threats/technologies/soho-250w): 3 vulnerabilities - [SonicWall Sohow](https://junglewise.ai/threats/technologies/sohow): 3 vulnerabilities - [SonicWall Tz 300](https://junglewise.ai/threats/technologies/tz-300): 3 vulnerabilities - [SonicWall Tz 300p](https://junglewise.ai/threats/technologies/tz-300p): 3 vulnerabilities - [SonicWall Tz 300w](https://junglewise.ai/threats/technologies/tz-300w): 3 vulnerabilities - [SonicWall Tz 350](https://junglewise.ai/threats/technologies/tz-350): 3 vulnerabilities - [SonicWall Tz 350w](https://junglewise.ai/threats/technologies/tz-350w): 3 vulnerabilities - [SonicWall Tz 400](https://junglewise.ai/threats/technologies/tz-400): 3 vulnerabilities - [SonicWall Tz 400w](https://junglewise.ai/threats/technologies/tz-400w): 3 vulnerabilities - [SonicWall Tz 500](https://junglewise.ai/threats/technologies/tz-500): 3 vulnerabilities - [SonicWall Tz 500w](https://junglewise.ai/threats/technologies/tz-500w): 3 vulnerabilities - [SonicWall Tz 600](https://junglewise.ai/threats/technologies/tz-600): 3 vulnerabilities - [SonicWall Tz 600p](https://junglewise.ai/threats/technologies/tz-600p): 3 vulnerabilities - [SonicWall Tz280w](https://junglewise.ai/threats/technologies/tz280w): 3 vulnerabilities - [SonicWall Tz380w](https://junglewise.ai/threats/technologies/tz380w): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "SonicWall vulnerabilities", https://junglewise.ai/threats/vendors/sonicwall, 11 November 2026.