SonicWall: CISA KEV History
Every SonicWall vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
19
Added, last 12 months
5
Ransomware-linked
13
Latest addition
2026-09-02
SonicWall KEV additions per month, last 24 months
Most-listed products: SMA1000 Appliances, SonicOS, SonicWall Email Security, SMA100 Appliances, SMA100.
Latest 19 of 19 SonicWall KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-83548 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-09-02 | No |
| CVE-2026-83549 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 2026-09-02 | No |
| CVE-2026-15409 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 2026-07-14 | Yes |
| CVE-2026-15410 | SonicWall SMA1000 Appliances Code Injection Vulnerability | 2026-07-14 | Yes |
| CVE-2025-40602 | SonicWall SMA1000 Missing Authorization Vulnerability | 2025-12-17 | No |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-05-01 | No |
| CVE-2021-20035 | SonicWall SMA100 Appliances OS Command Injection Vulnerability | 2025-04-16 | No |
| CVE-2024-53704 | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | 2025-02-18 | Yes |
| CVE-2025-23006 | SonicWall SMA1000 Appliances Deserialization Vulnerability | 2025-01-24 | Yes |
| CVE-2024-40766 | SonicWall SonicOS Improper Access Control Vulnerability | 2024-09-09 | Yes |
| CVE-2021-20028 | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 2022-03-28 | Yes |
| CVE-2019-7483 | SonicWall SMA100 Directory Traversal Vulnerability | 2022-03-28 | No |
| CVE-2020-5135 | SonicWall SonicOS Buffer Overflow Vulnerability | 2022-03-15 | Yes |
| CVE-2021-20038 | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | 2022-01-28 | Yes |
| CVE-2021-20021 | SonicWall Email Security Improper Privilege Management Vulnerability | 2021-11-03 | Yes |
| CVE-2019-7481 | SonicWall SMA100 SQL Injection Vulnerability | 2021-11-03 | Yes |
| CVE-2021-20022 | SonicWall Email Security Unrestricted Upload of File Vulnerability | 2021-11-03 | Yes |
| CVE-2021-20023 | SonicWall Email Security Path Traversal Vulnerability | 2021-11-03 | Yes |
| CVE-2021-20016 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 2021-11-03 | Yes |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.