SonicWall 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
一般的な弱点パターンには vendor risk memory corruption、vendor risk cross-site scripting、vendor risk sql injection, and vendor risk input validation があり、vendor surface production workloads の利用場面で vendor impact memory corruption、ファイル上書き, and vendor impact session compromise などのリスクが生じる可能性があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2026-0206 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.17% | 2026-04-29 | 2026-05-05 |
| CVE-2026-0205 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. | [email protected] | 6.8 | 0.01% | 2026-04-29 | 2026-05-05 |
| CVE-2026-0204 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. | [email protected] | 8.0 | 0.01% | 2026-04-29 | 2026-05-05 |
| CVE-2026-4116 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication. | [email protected] | 7.2 | 0.22% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4114 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication. | [email protected] | 6.6 | 0.03% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4113 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials. | [email protected] | 7.2 | 0.07% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4112 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator. | [email protected] | 7.2 | 0.03% | 2026-04-09 | 2026-05-14 |
| CVE-2026-3470 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database. | [email protected] | 3.8 | 0.05% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3469 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive. | [email protected] | 2.7 | 0.05% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3468 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code. | [email protected] | 4.8 | 0.02% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3439 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.13% | 2026-03-04 | 2026-03-05 |
| CVE-2026-0402 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0401 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.36% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0400 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0399 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. | [email protected] | 4.9 | 0.05% | 2026-02-24 | 2026-02-26 |
| CVE-2025-40602 KEV | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | [email protected] | 6.6 | 0.39% | 2025-12-18 | 2025-12-19 |
| CVE-2025-40605 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path. | [email protected] | 5.3 | 0.03% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40604 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution. | [email protected] | 9.8 | 0.01% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40601 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. | [email protected] | 7.5 | 0.04% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40603 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data. | [email protected] | 4.5 | 0.04% | 2025-10-31 | 2025-11-06 |