汇总 SonicWall 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 内存损坏、跨站脚本、SQL 注入与输入验证问题，在 生产负载与软件部署 使用场景中可能带来 内存损坏、文件覆盖与会话劫持 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2026-0206 | A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.50% | 2026-04-29 | 2026-06-17 |
| CVE-2026-0205 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. | [email protected] | 6.8 | 0.43% | 2026-04-29 | 2026-06-17 |
| CVE-2026-0204 | A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions. | [email protected] | 8.0 | 0.41% | 2026-04-29 | 2026-06-17 |
| CVE-2026-4116 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication. | [email protected] | 7.2 | 0.42% | 2026-04-09 | 2026-06-17 |
| CVE-2026-4114 | Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication. | [email protected] | 6.6 | 0.60% | 2026-04-09 | 2026-06-17 |
| CVE-2026-4113 | An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials. | [email protected] | 7.2 | 0.36% | 2026-04-09 | 2026-06-17 |
| CVE-2026-4112 | Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator. | [email protected] | 7.2 | 0.61% | 2026-04-09 | 2026-06-17 |
| CVE-2026-3470 | A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database. | [email protected] | 3.8 | 0.32% | 2026-03-31 | 2026-06-17 |
| CVE-2026-3469 | A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive. | [email protected] | 2.7 | 0.39% | 2026-03-31 | 2026-06-17 |
| CVE-2026-3468 | A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code. | [email protected] | 4.8 | 0.23% | 2026-03-31 | 2026-06-17 |
| CVE-2026-3439 | A post-authentication Stack-based Buffer Overflow vulnerability in SonicOS certificate handling allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-03-04 | 2026-06-17 |
| CVE-2026-0402 | A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.26% | 2026-02-24 | 2026-06-17 |
| CVE-2026-0401 | A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.34% | 2026-02-24 | 2026-06-17 |
| CVE-2026-0400 | A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall. | [email protected] | 4.9 | 0.40% | 2026-02-24 | 2026-06-17 |
| CVE-2026-0399 | Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint. | [email protected] | 4.9 | 0.32% | 2026-02-24 | 2026-06-17 |
| CVE-2025-40602 KEV | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC). | [email protected] | 6.6 | 1.91% | 2025-12-18 | 2026-06-17 |
| CVE-2025-40605 | A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path. | [email protected] | 5.3 | 0.29% | 2025-11-20 | 2026-06-17 |
| CVE-2025-40604 | Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution. | [email protected] | 9.8 | 0.17% | 2025-11-20 | 2026-06-17 |
| CVE-2025-40601 | A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash. | [email protected] | 7.5 | 1.06% | 2025-11-20 | 2026-06-17 |
| CVE-2025-40603 | A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data. | [email protected] | 4.5 | 0.38% | 2025-10-31 | 2026-06-17 |