Vendor dossier / #14
SonicWall vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 19 SonicWall vulnerabilities as of catalog 2026.09.23, 1.1% of all 1,721 entries and rank 14 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2026-09-02; 13 are flagged as used in ransomware campaigns.
- KEV entries
- 191.1% of catalog
- Last 90 days
- +4added
- Ransomware: known
- 1368.4%
- Products
- 9distinct
- First added
- 2021-11-03
- Latest added
- 2026-09-02
- Median days to due
- 14
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 5 |
| 2022 | 4 |
| 2023 | 0 |
| 2024 | 1 |
| 2025 | 5 |
| 2026 | 4 |
QCommon questions
How many SonicWall vulnerabilities are in CISA KEV?
19, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 1.1% of the catalog.
Which SonicWall product has the most KEV entries?
SMA1000 Appliances, with 5 entries. 9 products appear in total.
How many SonicWall KEV vulnerabilities are linked to ransomware?
13 of 19 (68.4%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest SonicWall vulnerability added to KEV?
2026-09-02 (CVE-2026-83549).
What is the most common weakness in SonicWall KEV entries?
CWE-78 (OS command injection), listed on 3 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| SMA1000 Appliances | 5 | 26.3% |
| SonicOS | 3 | 15.8% |
| SonicWall Email Security | 3 | 15.8% |
| SMA100 Appliances | 2 | 10.5% |
| SMA100 | 2 | 10.5% |
| SMA1000 appliance | 1 | 5.3% |
| Secure Remote Access (SRA) | 1 | 5.3% |
| SMA 100 Appliances | 1 | 5.3% |
| SSLVPN SMA100 | 1 | 5.3% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-78 OS command injection | 3 | 15.8% |
| CWE-89 SQL injection | 3 | 15.8% |
| CWE-918 Server-side request forgery | 2 | 10.5% |
| CWE-22 Path traversal | 2 | 10.5% |
| CWE-441 | 1 | 5.3% |
| CWE-94 Code injection | 1 | 5.3% |
| CWE-862 Missing authorization | 1 | 5.3% |
| CWE-250 | 1 | 5.3% |
| CWE-287 Improper authentication | 1 | 5.3% |
| CWE-502 Unsafe deserialization | 1 | 5.3% |
| CWE-284 Improper access control | 1 | 5.3% |
| CWE-120 Classic buffer overflow | 1 | 5.3% |
EAll 19 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2026-83549 | SMA1000 Appliances | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2026-83548 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Unknown | CWE-918, CWE-441 | ||
| CVE-2026-15410 | SMA1000 Appliances | SonicWall SMA1000 Appliances Code Injection Vulnerability | Known | CWE-94 | ||
| CVE-2026-15409 | SMA1000 Appliances | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | Known | CWE-918 | ||
| CVE-2025-40602 | SMA1000 appliance | SonicWall SMA1000 Missing Authorization Vulnerability | Unknown | CWE-862, CWE-250 | ||
| CVE-2023-44221 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2021-20035 | SMA100 Appliances | SonicWall SMA100 Appliances OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2024-53704 | SonicOS | SonicWall SonicOS SSLVPN Improper Authentication Vulnerability | Known | CWE-287 | ||
| CVE-2025-23006 | SMA1000 Appliances | SonicWall SMA1000 Appliances Deserialization Vulnerability | Known | CWE-502 | ||
| CVE-2024-40766 | SonicOS | SonicWall SonicOS Improper Access Control Vulnerability | Known | CWE-284 | ||
| CVE-2021-20028 | Secure Remote Access (SRA) | SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | Known | CWE-89 | ||
| CVE-2019-7483 | SMA100 | SonicWall SMA100 Directory Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2020-5135 | SonicOS | SonicWall SonicOS Buffer Overflow Vulnerability | Known | CWE-120 | ||
| CVE-2021-20038 | SMA 100 Appliances | SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | Known | CWE-121 | ||
| CVE-2021-20023 | SonicWall Email Security | SonicWall Email Security Path Traversal Vulnerability | Known | CWE-22 | ||
| CVE-2021-20022 | SonicWall Email Security | SonicWall Email Security Unrestricted Upload of File Vulnerability | Known | CWE-434 | ||
| CVE-2021-20021 | SonicWall Email Security | SonicWall Email Security Improper Privilege Management Vulnerability | Known | CWE-306 | ||
| CVE-2021-20016 | SSLVPN SMA100 | SonicWall SSLVPN SMA100 SQL Injection Vulnerability | Known | CWE-89 | ||
| CVE-2019-7481 | SMA100 | SonicWall SMA100 SQL Injection Vulnerability | Known | CWE-89 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 19 SonicWall vulnerabilities (1.1% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/sonicwall/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about SonicWall beyond this data.