https://exploit-radar.com/en/flux/marques/sonicwall.xml Exploit Radar: exploited SonicWall vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for SonicWall products. 2026-09-02T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-83548/ CVE-2026-83548 — SonicWall SMA 1000 2026-09-02T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-83549/ CVE-2026-83549 — SonicWall SMA 1000 2026-09-02T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 2, 2026. https://exploit-radar.com/en/cve/CVE-2026-15409/ CVE-2026-15409 — SonicWall SMA 1000 2026-07-14T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2026-15410/ CVE-2026-15410 — SonicWall SMA 1000 2026-07-14T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 14, 2026. https://exploit-radar.com/en/cve/CVE-2025-40602/ CVE-2025-40602 — SonicWall SMA 1000 2025-12-17T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 17, 2025. https://exploit-radar.com/en/cve/CVE-2023-44221/ CVE-2023-44221 — SonicWall SMA 100 (ex-SRA) 2025-05-01T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2025. https://exploit-radar.com/en/cve/CVE-2021-20035/ CVE-2021-20035 — SonicWall SMA 100 (ex-SRA) 2025-04-16T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. For cloud services, follow the guidance from SonicWall. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on April 16, 2025. https://exploit-radar.com/en/cve/CVE-2024-53704/ CVE-2024-53704 — SonicWall SonicOS 2025-02-18T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-23006/ CVE-2025-23006 — SonicWall SMA 1000 2025-01-24T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 24, 2025. https://exploit-radar.com/en/cve/CVE-2024-40766/ CVE-2024-40766 — SonicWall SonicOS 2024-09-09T00:00:00Z Apply the patches or mitigations from SonicWall; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2024. https://exploit-radar.com/en/cve/CVE-2019-7483/ CVE-2019-7483 — SonicWall SMA 100 (ex-SRA) 2022-03-28T00:00:00Z Apply the security update from SonicWall. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2021-20028/ CVE-2021-20028 — SonicWall SMA 100 (ex-SRA) 2022-03-28T00:00:00Z This product has reached end of life: no patch is coming. Remove it or isolate it from the network. CISA deadline: 21 days. Used in ransomware campaigns. End of life: remove it. Added to CISA’s catalog of exploited vulnerabilities on March 28, 2022. https://exploit-radar.com/en/cve/CVE-2020-5135/ CVE-2020-5135 — SonicWall SonicOS 2022-03-15T00:00:00Z Apply the security update from SonicWall. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 15, 2022. https://exploit-radar.com/en/cve/CVE-2021-20038/ CVE-2021-20038 — SonicWall SMA 100 (ex-SRA) 2022-01-28T00:00:00Z Apply the security update from SonicWall. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 28, 2022. https://exploit-radar.com/en/cve/CVE-2021-20016/ CVE-2021-20016 — SonicWall SMA 100 (ex-SRA) 2021-11-03T00:00:00Z Apply the security update from SonicWall. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-20021/ CVE-2021-20021 — SonicWall Email Security 2021-11-03T00:00:00Z Apply the security update from SonicWall. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-7481/ CVE-2019-7481 — SonicWall SMA 100 (ex-SRA) 2021-11-03T00:00:00Z Apply the security update from SonicWall. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-20022/ CVE-2021-20022 — SonicWall Email Security 2021-11-03T00:00:00Z Apply the security update from SonicWall. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-20023/ CVE-2021-20023 — SonicWall Email Security 2021-11-03T00:00:00Z Apply the security update from SonicWall. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.