Aggregates CVE and security vulnerability intelligence across all SonicWall-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Common weakness patterns include vendor risk memory corruption, vendor risk cross-site scripting, and vendor risk sql injection, with potential vendor impact memory corruption across vendor surface production workloads use cases.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-0206 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.17% | 2026-04-29 | 2026-05-05 |
| CVE-2026-0205 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. | [email protected] | 6.8 | 0.01% | 2026-04-29 | 2026-05-05 |
| CVE-2026-0204 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. | [email protected] | 8.0 | 0.01% | 2026-04-29 | 2026-05-05 |
| CVE-2026-4116 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication. | [email protected] | 7.2 | 0.22% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4114 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication. | [email protected] | 6.6 | 0.03% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4113 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials. | [email protected] | 7.2 | 0.07% | 2026-04-09 | 2026-05-14 |
| CVE-2026-4112 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator. | [email protected] | 7.2 | 0.03% | 2026-04-09 | 2026-05-14 |
| CVE-2026-3470 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database. | [email protected] | 3.8 | 0.05% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3469 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive. | [email protected] | 2.7 | 0.05% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3468 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code. | [email protected] | 4.8 | 0.02% | 2026-03-31 | 2026-04-13 |
| CVE-2026-3439 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.13% | 2026-03-04 | 2026-03-05 |
| CVE-2026-0402 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0401 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.36% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0400 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-02-24 | 2026-02-26 |
| CVE-2026-0399 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. | [email protected] | 4.9 | 0.05% | 2026-02-24 | 2026-02-26 |
| CVE-2025-40602 KEV | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | [email protected] | 6.6 | 0.39% | 2025-12-18 | 2025-12-19 |
| CVE-2025-40605 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path. | [email protected] | 5.3 | 0.03% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40604 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution. | [email protected] | 9.8 | 0.01% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40601 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. | [email protected] | 7.5 | 0.04% | 2025-11-20 | 2025-12-12 |
| CVE-2025-40603 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data. | [email protected] | 4.5 | 0.04% | 2025-10-31 | 2025-11-06 |