Sonicwall

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-83549 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Sep 3, 2026 Sep 1, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditi...Show more Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution.Show less
CVE-2026-83548 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Sep 3, 2026 Sep 1, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to g...Show more A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations.Show less
CVE-2026-15410 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Jul 16, 2026 Jul 14, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a re...Show more Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.Show less
CVE-2026-15409 1Sonicwall 3Sma6210 Firmware Sma7210 FirmwareSma8200v Jul 16, 2026 Jul 14, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended...Show more A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.Show less
CVE-2026-0206 1Sonicwall 1Sonicos Jun 17, 2026 Apr 29, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0205 1Sonicwall 1Sonicos Jun 17, 2026 Apr 29, 2026 N/A· v4 6.8 MEDIUM· v3 N/A· v2 A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVE-2026-0204 1Sonicwall 1Sonicos Jun 17, 2026 Apr 29, 2026 N/A· v4 8.0 HIGH· v3 N/A· v2 A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.
CVE-2026-4116 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
CVE-2026-4114 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.
CVE-2026-4113 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
CVE-2026-4112 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Apr 9, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privi...Show more Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.Show less
CVE-2026-3470 1Sonicwall 1Email Security Jul 24, 2026 Mar 31, 2026 N/A· v4 3.8 LOW· v3 N/A· v2 A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by pro...Show more A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.Show less
CVE-2026-3469 1Sonicwall 1Email Security Jul 24, 2026 Mar 31, 2026 N/A· v4 2.7 LOW· v3 N/A· v2 A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unrespo...Show more A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.Show less
CVE-2026-3468 1Sonicwall 1Email Security Jul 24, 2026 Mar 31, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenti...Show more A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.Show less
CVE-2026-3439 1Sonicwall 1Sonicos Jun 17, 2026 Mar 4, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall.
CVE-2026-0402 1Sonicwall 1Sonicos Jun 17, 2026 Feb 24, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0401 1Sonicwall 1Sonicos Jun 17, 2026 Feb 24, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0400 1Sonicwall 1Sonicos Jun 17, 2026 Feb 24, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
CVE-2026-0399 1Sonicwall 1Sonicos Jun 17, 2026 Feb 24, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
CVE-2025-40602 1Sonicwall 5Sma6200 Firmware Sma6210 FirmwareSma7200 Firmware+2 more Jun 17, 2026 Dec 18, 2025 N/A· v4 6.6 MEDIUM· v3 N/A· v2 A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

12 3 4 5...12 Next