SonicWall — known exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalog (KEV) lists vulnerabilities that CISA has confirmed are being exploited in the wild; U.S. federal civilian agencies are required to remediate each entry by its due date. This page joins the KEV entries for SonicWall with NVD CVSS scores and CISA's ransomware-campaign flag. See our methodology or browse all CVEs.
Key findings
CISA's Known Exploited Vulnerabilities catalog lists 19 SonicWall vulnerabilities confirmed as exploited in the wild across 9 products; 13 of them (68%) are flagged as used in known ransomware campaigns. SMA1000 Appliances is the most-affected product, with 5 entries (26% of the total). CISA added 4 entries in 2026 so far, compared with 5 in 2025. Across the 19 entries with an NVD CVSS score (100% of the total), the average score is 8.5; 10 entries are rated critical by NVD. The most recent addition is CVE-2026-83548 (SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability), added on 2026-09-02.
Affected products
| Product | Entries | Share |
|---|---|---|
| SMA1000 Appliances | 5 | 26% |
| SonicOS | 3 | 16% |
| SonicWall Email Security | 3 | 16% |
| SMA100 Appliances | 2 | 11% |
| SMA100 | 2 | 11% |
| SMA1000 appliance | 1 | 5.3% |
| Secure Remote Access (SRA) | 1 | 5.3% |
| SMA 100 Appliances | 1 | 5.3% |
| SSLVPN SMA100 | 1 | 5.3% |
Entries added per year
By date added to the KEV catalog
Exploited SonicWall vulnerabilities (19)
Newest first. CVSS scores from NVD where available.
| CVE | Product | Vulnerability | Date added | Ransomware | CVSS |
|---|---|---|---|---|---|
| CVE-2026-83548 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-09-02 | — | CRITICAL10.0 |
| CVE-2026-83549 | SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2026-09-02 | — | HIGH7.8 |
| CVE-2026-15409 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-07-14 | Known | CRITICAL10.0 |
| CVE-2026-15410 | SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 2026-07-14 | Known | HIGH7.2 |
| CVE-2025-40602 | SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | 2025-12-17 | — | MEDIUM6.6 |
| CVE-2023-44221 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-05-01 | — | HIGH7.2 |
| CVE-2021-20035 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-04-16 | — | MEDIUM6.5 |
| CVE-2024-53704 | SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 2025-02-18 | Known | CRITICAL9.8 |
| CVE-2025-23006 | SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | 2025-01-24 | Known | CRITICAL9.8 |
| CVE-2024-40766 | SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | 2024-09-09 | Known | CRITICAL9.8 |
| CVE-2021-20028 | Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 2022-03-28 | Known | CRITICAL9.8 |
| CVE-2019-7483 | SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | 2022-03-28 | — | HIGH7.5 |
| CVE-2020-5135 | SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | 2022-03-15 | Known | CRITICAL9.8 |
| CVE-2021-20038 | SMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | 2022-01-28 | Known | CRITICAL9.8 |
| CVE-2021-20021 | SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | 2021-11-03 | Known | CRITICAL9.8 |
| CVE-2019-7481 | SMA100 | SonicWall SMA100 SQL Injection Vulnerability | 2021-11-03 | Known | HIGH7.5 |
| CVE-2021-20022 | SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | 2021-11-03 | Known | HIGH7.2 |
| CVE-2021-20023 | SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | 2021-11-03 | Known | MEDIUM4.9 |
| CVE-2021-20016 | SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 2021-11-03 | Known | CRITICAL9.8 |
Source: CISA Known Exploited Vulnerabilities catalog, joined with NIST NVD CVSS data. Vendor names are normalized across spellings. Compare all vendors.