SonicWall: every exploited CVE on CISA KEV
All 19 SonicWall bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
19
SonicWall bugs on CISA’s exploited list
4 added in 2026.
13
are linked to ransomware
Every SonicWall vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-09-02 | CVE-2026-83549 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 0.10 | 0.98 | Out of scope (local) | No |
| 2026-09-02 | CVE-2026-83548 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.08 | 0.99 | None yet | No |
| 2026-07-14 | CVE-2026-15410 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | 0.12 | 0.54 | None yet | Yes |
| 2026-07-14 | CVE-2026-15409 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 0.07 | 0.98 | None yet | Yes |
| 2025-12-17 | CVE-2025-40602 | SonicWall SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | 0.03 | 0.99 | Nuclei · Suricata | No |
| 2025-05-01 | CVE-2023-44221 | SonicWall SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 0.76 | 0.98 | Nuclei · Suricata | No |
| 2025-04-16 | CVE-2021-20035 | SonicWall SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 0.04 | 0.70 | None yet | No |
| 2025-02-18 | CVE-2024-53704 | SonicWall SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 0.95 | 0.99 | Nuclei · Suricata | Yes |
| 2025-01-24 | CVE-2025-23006 | SonicWall SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | 0.27 | 0.98 | None yet | Yes |
| 2024-09-09 | CVE-2024-40766 | SonicWall SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | 0.18 | 0.98 | None yet | Yes |
| 2022-03-28 | CVE-2021-20028 | SonicWall Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 0.30 | 0.59 | None yet | Yes |
| 2022-03-28 | CVE-2019-7483 | SonicWall SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | 0.04 | 0.70 | None yet | No |
| 2022-03-15 | CVE-2020-5135 | SonicWall SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | 0.27 | 0.99 | Nuclei · Suricata | Yes |
| 2022-01-28 | CVE-2021-20038 | SonicWall SMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2021-20023 | SonicWall SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | 0.52 | 0.77 | None yet | Yes |
| 2021-11-03 | CVE-2021-20022 | SonicWall SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | 0.17 | 0.55 | None yet | Yes |
| 2021-11-03 | CVE-2021-20021 | SonicWall SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | 0.89 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2021-20016 | SonicWall SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 0.40 | 0.75 | None yet | Yes |
| 2021-11-03 | CVE-2019-7481 | SonicWall SMA100 | SonicWall SMA100 SQL Injection Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
Industry partners
