Vendor
SonicWall
- CVEs tracked · all time
- 24
- in CISA KEV · all time
- 5
- articles · since 11 Sep
- 14
- articles · all time
- 49
14 articles since 11 Sep.
Show as table
| Day (UTC) | Articles |
|---|---|
| Fri 11 Sep | 2 |
| Tue 6 Oct | 1 |
| Wed 7 Oct | 2 |
| Thu 8 Oct | 1 |
| Fri 9 Oct | 1 |
| Mon 12 Oct | 5 |
| Thu 15 Oct | 1 |
| Fri 23 Oct | 1 |
Products: Email Security, GMS, NetExtender, Network Security Manager (NSM) and 3 more
Email SecurityGMSNetExtenderNetwork Security Manager (NSM)SMA1000SMA1000 AppliancesSonicOS
CVEs
24 CVEsCVE-2026-15409SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCVSS10.0CriticalExploited6.8%EPSS19articles
CVE-2026-15410SonicWall SMA1000 Appliances Code Injection VulnerabilityCVSS7.2HighExploited12%EPSS16articles
CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityCVSS10.0CriticalExploited8.0%EPSS10articles
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection VulnerabilityCVSS7.8HighExploited9.9%EPSS10articles
CVE-2024-40766SonicWall SonicOS Improper Access Control VulnerabilityCVSS9.3CriticalExploited18%EPSS1article
CVE-2026-100232SonicWall Network Security Manager (NSM) vulnerabilityCVSSUnrated–Not in KEV1.1%EPSS1article
CVE-2026-96540SonicWall Network Security Manager (NSM) vulnerabilityCVSSUnrated–Not in KEV0.3%EPSS1article
CVE-2026-81939SonicWall Network Security Manager (NSM) vulnerabilityCVSS9.1Critical–Not in KEV0.7%EPSS1article
12 more CVEs
CVE-2026-78327SonicWall Network Security Manager (NSM) vulnerabilityCVSS9.1Critical–Not in KEV1.6%EPSS1article
CVE-2026-78328SonicWall Network Security Manager (NSM) vulnerabilityCVSS9.1Critical–Not in KEV0.5%EPSS1article
- AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
- SonicWall fixes two flaws enabling attacks on on-prem NSM systemsSecurityOnline
- Hackers Exploit Critical SonicWall SMA 1000 Flaw in the WildDark Reading
- Attackers Exploit Critical SonicWall SMA Flaw Without Logging InSecurity Affairs
- Hackers Exploit Critical SonicWall SMA Flaw Within Days of DisclosureThe Hacker News
- Attackers Exploit Critical SonicWall SMA1000 Flaw Days After DisclosureSecurityWeek
- Six Actively Exploited Flaws Remain Outside CISA’s KEV CatalogSecurityOnline
- SonicWall SMA1000 Flaw Exploited to Bypass AuthenticationSecurityOnline
- SonicWall and Splunk Patch Flaws That Could Enable AttacksSecurityWeek
- SonicWall Fixes Critical Pre Auth SSRF Flaw in SMA1000 AppliancesSecurity Affairs
- SonicWall fixes pre-auth flaw rated 10.0 in SMA1000 appliancesThe Hacker News
- SonicWall Patches Critical Pre-Auth Flaw in SMA1000 AppliancesSecurityOnline
- SonicWall VPN Flaw Exposed Credentials Across 250 OrganisationsSecurity Affairs
- SonicWall Flaw Exposed 160 Active Directory Domains to AttackersSecurityOnline
- SonicWall SMA Flaws Let Attackers Gain Root Access in the WildSecurityOnline
- CISA KEV Missed Four Actively Exploited AI and WordPress FlawsSecurityOnline
- SonicWall NSM Flaws Enable Authentication Bypass and Command ExecutionSecurityOnline
- SonicWall CVE-2026-83548 Leads to CISA AlertSOCRadar
- SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCEDark Reading
- Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the WildRapid7
- SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNsSecurity Affairs
- Hackers Chain Two New SonicWall Zero-Day VulnerabilitiesInfosecurity
- SonicWall Warns of Two SMA1000 Zero-Days Exploited in AttacksSecurityWeek
- CVE-2026-83548 Exploited: SMA1000 SSRF Hits 10.0SecurityOnline
- SonicWall NetExtender VPN flaws let attackers gain root on LinuxSecurityOnline
- SonicWall patches GMS RCE flaws CVE-2026-66147, CVE-2026-66145SecurityWeek
- SonicWall fixes critical RCE bug CVE-2026-66147 in GMS, EmailSecurityOnline
- INC Ransomware abuses CVE-2026-15409 in SonicWall, calls victimsSecurity Affairs
- INC Ransomware exploits CVE-2026-15409, gains root on SonicWallSecurityWeek
- SonicWall SMA Exploit Chain Now Fuels INC Ransomware AttacksSecurityOnline
- SonicWall SMA 1000 zero day used to spread KNUCKLEBALLSOCRadar
- SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before PatchSecurityWeek
- Zero day exploits hit SonicWall VPN, giving attackers root accessSecurity Affairs
- Zero day exploit targets SonicWall SMA 1000, installs malwareSecurityOnline
- SonicWall CVE-2026-15409 flaw lets ransomware group hijack VPNsDark Reading
- Microsoft, SonicWall bugs found; RabbitMQ patches auth flawsSecurityOnline
- SonicWall SMA1000 flaws exploited, urgent patch advisedRapid7
- CISA Flags SonicWall SMA1000 and Microsoft Flaws in KEV CatalogSecurity Affairs
- SonicWall Warns of Active Exploitation of SMA 1000 Zero DaysSecurity Affairs
- SonicWall patches critical zero day flaws in SMA1000 appliancesSecurityWeek
- CISA KEV Catalog Highlights SonicWall SMA1000 Flaw CVE-2026-15409CISA · official notice
- CISA Adds SonicWall SMA1000 Code Injection Flaw to KEV CatalogCISA · official notice
- CISA Flags CVE‑2026-15410 in KEV After SonicWall SMA1000 ExploitCISA · official notice
- CISA Lists SonicWall SMA1000 SSRF Flaw in KEV, Urges PatchCISA · official notice
- CVE-2024-40766 exposes SonicWall firewalls to ransomwareSANS ISC
- Attackers exploit CVE-2024-12802 to bypass SonicWall VPN MFASecurity Affairs
- SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls. Patch them nowSecurity Affairs
- SonicWall Urges Immediate Patching of Firewall VulnerabilitiesSecurityWeek
- Palo Alto, SonicWall patch critical CVE-2026-0234 and other flawsSecurityWeek · first in our coverage