Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

SonicWall: actively exploited vulnerabilities

19 vulnerabilities in SonicWall products (SMA 100 (ex-SRA), SMA 1000, Email Security…) are in CISA’s catalog of exploited vulnerabilities, 4 of them added in the last 90 days. Last added: September 2, 2026.

SonicWall security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

Active CERT-FR alert: CERTFR-2026-ALE-009 — Multiples vulnérabilités dans SonicWall Secure Mobile Access

By category

Add just one SonicWall category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single SonicWall product (SMA 100 (ex-SRA), SMA 1000…) rather than the whole brand.

  • SMA 100 (ex-SRA)7 vulnerabilities, Firewalls and VPNs
  • SMA 10006 vulnerabilities, Firewalls and VPNs
  • Email Security3 vulnerabilities, Email
  • SonicOS3 vulnerabilities, Firewalls and VPNs

Name used by CISA: SonicWall. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this SonicWall list.

  1. Rank 1

    SonicWall SMA 1000CVE-2026-83548

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    Active CERT-FR alertHunt for compromise (CISA)

    CVSS severity 10.0critical

    Added Sep 2, 2026

  2. Rank 2

    SonicWall SMA 1000CVE-2026-15409

    SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 10.0critical

    Added Jul 14, 2026

  3. Rank 3

    SonicWall SMA 1000CVE-2026-83549

    SonicWall SMA1000 Appliances OS Command Injection Vulnerability

    Active CERT-FR alertHunt for compromise (CISA)

    CVSS severity 7.8high

    Added Sep 2, 2026

  4. Rank 4

    SonicWall SMA 1000CVE-2026-15410

    SonicWall SMA1000 Appliances Code Injection Vulnerability

    Hunt for compromise (CISA)Ransomware

    CVSS severity 7.2high

    Added Jul 14, 2026

  5. Rank 5

    SonicWall SMA 1000CVE-2025-40602

    SonicWall SMA1000 Missing Authorization Vulnerability

    CVSS severity 6.6medium

    Added Dec 17, 2025

  6. Rank 6

    SonicWall SonicOSCVE-2024-53704

    SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Feb 18, 2025

  7. Rank 7

    SonicWall SMA 1000CVE-2025-23006

    SonicWall SMA1000 Appliances Deserialization Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 24, 2025

  8. Rank 8

    SonicWall SonicOSCVE-2024-40766

    SonicWall SonicOS Improper Access Control Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Sep 9, 2024

  9. Rank 9

    SonicWall SonicOSCVE-2020-5135

    SonicWall SonicOS Buffer Overflow Vulnerability

    RansomwareCVE from 2020, added in 2022

    CVSS severity 9.8critical

    Added Mar 15, 2022

  10. Rank 10

    SonicWall SMA 100 (ex-SRA)CVE-2021-20038

    SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Jan 28, 2022

Show 8 more vulnerabilities
  1. Rank 11

    SonicWall SMA 100 (ex-SRA)CVE-2021-20016

    SonicWall SSLVPN SMA100 SQL Injection Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  2. Rank 12

    SonicWall Email SecurityCVE-2021-20021

    SonicWall Email Security Improper Privilege Management Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Nov 3, 2021

  3. Rank 13

    SonicWall SMA 100 (ex-SRA)CVE-2019-7483

    SonicWall SMA100 Directory Traversal Vulnerability

    CVE from 2019, added in 2022

    CVSS severity 7.5high

    Added Mar 28, 2022

  4. Rank 14

    SonicWall SMA 100 (ex-SRA)CVE-2019-7481

    SonicWall SMA100 SQL Injection Vulnerability

    RansomwareCVE from 2019, added in 2021

    CVSS severity 7.5high

    Added Nov 3, 2021

  5. Rank 15

    SonicWall SMA 100 (ex-SRA)CVE-2023-44221

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    CVE from 2023, added in 2025

    CVSS severity 7.2high

    Added May 1, 2025

  6. Rank 16

    SonicWall Email SecurityCVE-2021-20022

    SonicWall Email Security Unrestricted Upload of File Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Nov 3, 2021

  7. Rank 17

    SonicWall SMA 100 (ex-SRA)CVE-2021-20035

    SonicWall SMA100 Appliances OS Command Injection Vulnerability

    CVE from 2021, added in 2025

    CVSS severity 6.5medium

    Added Apr 16, 2025

  8. Rank 18

    SonicWall Email SecurityCVE-2021-20023

    SonicWall Email Security Path Traversal Vulnerability

    Ransomware

    CVSS severity 4.9medium

    Added Nov 3, 2021

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. SonicWall SMA 100 (ex-SRA)CVE-2021-20028

    SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

    RansomwareEnd of life

    CVSS severity 9.8critical

    Added Mar 28, 2022

Follow and verify

Get new SonicWall vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.