SonicWall
Number 80 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
221
Critical
24
High
60
Known Exploited
20
Exploit available
2
Network, no login needed
42.7%
Of 124 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 49 | 9 | 20 | 18 | 2 | 0 |
| 2025 | 31 | 6 | 17 | 8 | 0 | 0 |
| 2024 | 21 | 2 | 10 | 9 | 0 | 0 |
| 2023 | 34 | 1 | 8 | 1 | 0 | 24 |
| 2022 | 20 | 0 | 1 | 0 | 0 | 19 |
| 2021 | 32 | 4 | 2 | 2 | 0 | 24 |
| 2020 | 17 | 1 | 0 | 0 | 0 | 16 |
| 2019 | 16 | 0 | 2 | 0 | 0 | 14 |
| 2018 | 1 | 1 | 0 | 0 | 0 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| SonicOS | 74 | 23 |
| SMA100 | 26 | 9 |
| GMS | 24 | 9 |
| SMA1000 | 18 | 14 |
| Email Security | 11 | 4 |
| SonicWall SMA100 | 11 | 3 |
| NetExtender | 10 | 8 |
| Global Management System (GMS) | 5 | 2 |
| Network Security Manager (NSM) | 5 | 5 |
| SonicWall Global VPN Client | 5 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Memory Corruption | 25 | 7 |
| Stack-based Buffer Overflow | 23 | 6 |
| Command Injection | 17 | 9 |
| Path Traversal | 10 | 6 |
| SQL Injection | 9 | 5 |
| Code Injection | 8 | 6 |
| Information Disclosure | 8 | 0 |
| Authentication Issues | 7 | 3 |
| Server-Side Request Forgery | 7 | 7 |
| Cross-Site Scripting | 6 | 1 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-19868 | SonicWall SonicOS vulnerability | High | 0.5% | |
| CVE-2026-83549 | SonicWall SMA1000: Command Injection | High | 9.9% | |
| CVE-2026-83548 | SonicWall SMA1000: Server-Side Request Forgery | Critical | 8.0% | |
| CVE-2026-15410 | SonicWall SMA1000: Code Injection | High | 11.8% | |
| CVE-2026-15409 | SonicWall SMA1000: Server-Side Request Forgery | Critical | 6.8% | |
| CVE-2025-40602 | SonicWall SMA1000: Missing Authorization | Medium | 2.8% | |
| CVE-2025-23006 | SonicWall SMA1000: Insecure Deserialization | Critical | 26.6% | |
| CVE-2024-53704 | SonicWall SonicOS: Authentication Issues | High | 95.3% | |
| CVE-2024-40766 | SonicWall SonicOS: Improper Access Control | Critical | 18.4% | |
| CVE-2023-44221 | SonicWall SMA100: Command Injection | High | 76.2% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-82308 | SonicWall SonicOS: Memory Corruption | High | 0.6% | |
| CVE-2026-77709 | SonicWall SonicOS: Memory Corruption | Medium | 0.7% | |
| CVE-2026-77708 | SonicWall SonicOS vulnerability | Medium | 0.7% | |
| CVE-2026-19868 | SonicWall SonicOS vulnerability | High | 0.5% | |
| CVE-2026-19703 | SonicWall SonicOS: Hard-coded Credentials | Medium | 0.2% | |
| CVE-2026-107155 | SonicWall SonicOS vulnerability | High | 0.8% | |
| CVE-2026-107154 | SonicWall SonicOS vulnerability | High | 0.7% | |
| CVE-2026-109594 | SonicWall Global Management System (GMS): SQL Injection | Medium | 0.4% | |
| CVE-2026-109593 | SonicWall Global Management System (GMS) vulnerability | Critical | 0.5% | |
| CVE-2026-96540 | SonicWall Network Security Manager (NSM): Incorrect Authorization | High | 0.3% |