sonicwall Vulnerability Advisory Catalog

Total 208 security vulnerabilities recorded for sonicwall software and firmware.

← Back to All Vendors
Component: sma6210_firmware

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Co...

๐Ÿ“… 2026-07-14
CVSS 7.2 Dossier →
CVE-2026-15409 CRITICAL
Component: sma6210_firmware

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacke...

๐Ÿ“… 2026-07-14
CVSS 10.0 Dossier →
CVE-2026-0206 MEDIUM
Component: sonicos

A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall....

๐Ÿ“… 2026-04-29
CVSS 4.9 Dossier →
CVE-2026-0205 MEDIUM
Component: sonicos

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services....

๐Ÿ“… 2026-04-29
CVSS 6.8 Dossier →
Component: sonicos

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions...

๐Ÿ“… 2026-04-29
CVSS 8.0 Dossier →
Component: sma6210_firmware

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tun...

๐Ÿ“… 2026-04-09
CVSS 7.2 Dossier →
CVE-2026-4114 MEDIUM
Component: sma6210_firmware

Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authenticat...

๐Ÿ“… 2026-04-09
CVSS 6.6 Dossier →
Component: sma6210_firmware

An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credent...

๐Ÿ“… 2026-04-09
CVSS 7.2 Dossier →
Component: sma6210_firmware

Improper neutralization of special elements used in an SQL command (โ€œSQL Injectionโ€) in SonicWall SMA1000 series appliances allows a remote authentica...

๐Ÿ“… 2026-04-09
CVSS 7.2 Dossier →
Component: email_security

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remot...

๐Ÿ“… 2026-03-31
CVSS 3.8 Dossier →
Component: email_security

A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authentic...

๐Ÿ“… 2026-03-31
CVSS 2.7 Dossier →
CVE-2026-3468 MEDIUM
Component: email_security

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user...

๐Ÿ“… 2026-03-31
CVSS 4.8 Dossier →
CVE-2026-3439 MEDIUM
Component: sonicos

A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall....

๐Ÿ“… 2026-03-04
CVSS 4.9 Dossier →
CVE-2026-0402 MEDIUM
Component: sonicos

A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall....

๐Ÿ“… 2026-02-24
CVSS 4.9 Dossier →
CVE-2026-0401 MEDIUM
Component: sonicos

A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall....

๐Ÿ“… 2026-02-24
CVSS 4.9 Dossier →
CVE-2026-0400 MEDIUM
Component: sonicos

A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall....

๐Ÿ“… 2026-02-24
CVSS 4.9 Dossier →
CVE-2026-0399 MEDIUM
Component: sonicos

Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API ...

๐Ÿ“… 2026-02-24
CVSS 4.9 Dossier →
Component: sma6200_firmware

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC)....

๐Ÿ“… 2025-12-18
CVSS 6.6 Dossier →
Component: email_security_appliance_5000_firmware

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting cra...

๐Ÿ“… 2025-11-20
CVSS 5.3 Dossier →
CVE-2025-40604 CRITICAL
Component: email_security_appliance_5000_firmware

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signat...

๐Ÿ“… 2025-11-20
CVSS 9.8 Dossier →
Component: sonicos

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), w...

๐Ÿ“… 2025-11-20
CVSS 7.5 Dossier →
Component: sma_210_firmware

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, unde...

๐Ÿ“… 2025-10-31
CVSS 4.5 Dossier →
CVE-2025-40600 CRITICAL
Component: sonicos

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service di...

๐Ÿ“… 2025-07-29
CVSS 9.8 Dossier →
Component: sma_500v_firmware

A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentia...

๐Ÿ“… 2025-07-23
CVSS 6.1 Dossier →
Page 1 of 9 (208 Total Records)