SonicWall
19 SonicWall flaws are on CISA's list of vulnerabilities attackers have used, 4 of them added in 2026. CISA says 13 are known to be used by ransomware. The latest was added Sep 2, 2026.
19on CISA's list, all time
4added in 2026
2in the last 90 days
13used by ransomware
6zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| SMA1000 Appliances | 5 | Sep 2, 2026 |
| SonicOS | 3 | Feb 18, 2025 |
| SonicWall Email Security | 3 | Nov 3, 2021 |
| SMA100 Appliances | 2 | May 1, 2025 |
| SMA100 | 2 | Mar 28, 2022 |
| SMA1000 appliance | 1 | Dec 17, 2025 |
| Secure Remote Access (SRA) | 1 | Mar 28, 2022 |
| SMA 100 Appliances | 1 | Jan 28, 2022 |
| SSLVPN SMA100 | 1 | Nov 3, 2021 |
Latest SonicWall flaws
- SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- SMA1000 AppliancesSonicWall SMA1000 Appliances OS Command Injection Vulnerability
- SMA1000 AppliancesSonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability
- SMA1000 AppliancesSonicWall SMA1000 Appliances Code Injection Vulnerability
- SMA1000 applianceSonicWall SMA1000 Missing Authorization Vulnerability
- SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
- SMA100 AppliancesSonicWall SMA100 Appliances OS Command Injection Vulnerability
- SonicOSSonicWall SonicOS SSLVPN Improper Authentication Vulnerability
- SMA1000 AppliancesSonicWall SMA1000 Appliances Deserialization Vulnerability
- SonicOSSonicWall SonicOS Improper Access Control Vulnerability
- SMA100SonicWall SMA100 Directory Traversal Vulnerability
- Secure Remote Access (SRA)SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
- SonicOSSonicWall SonicOS Buffer Overflow Vulnerability
- SMA 100 AppliancesSonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
- SMA100SonicWall SMA100 SQL Injection Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.